{"id":12078,"date":"2025-05-06T18:27:33","date_gmt":"2025-05-06T15:27:33","guid":{"rendered":"https:\/\/gls-law.company\/?p=12078"},"modified":"2025-05-06T18:27:37","modified_gmt":"2025-05-06T15:27:37","slug":"new-personal-data-law-in-ukraine-what-will-change-for-businesses-in-2025","status":"publish","type":"post","link":"https:\/\/gls-law.company\/en\/new-personal-data-law-in-ukraine-what-will-change-for-businesses-in-2025\/","title":{"rendered":"New Personal Data Law in Ukraine: What Will Change for Businesses in 2025"},"content":{"rendered":"\n

\ud83d\udccc New Legislation: What to Expect for Businesses in 2025?<\/p>\n\n\n\n

The Verkhovna Rada of Ukraine has passed Draft Law No. 8153 “On the Protection of Personal Data” in the first reading, aligning national legislation with GDPR standards. The final version is expected to be adopted in 2025.<\/p>\n\n\n\n

\u26a0\ufe0f Key Changes for Companies<\/strong><\/p>\n\n\n\n

    \n
  1. Appointment of a Data Protection Officer (DPO)<\/strong>
    Every business processing personal data will be required to appoint a Data Protection Officer. This person will be responsible for compliance monitoring, liaising with government authorities, and advising on risks and procedures.<\/li>\n\n\n\n
  2. Updated Consent Requirements<\/strong>
    Consent for data processing must be:<\/li>\n<\/ol>\n\n\n\n
      \n
    • Explicit (active action, checkbox, signature, etc.)<\/li>\n\n\n\n
    • Specific \u2014 clearly stating the purpose of processing<\/li>\n\n\n\n
    • Freely given \u2014 without coercion<\/li>\n\n\n\n
    • Informed \u2014 with accessible information about the processing<\/li>\n<\/ul>\n\n\n\n

      Collecting consent for HR documentation will be restricted \u2014 a valid employment contract and legal compliance will suffice.<\/p>\n\n\n\n

        \n
      1. Ban on Processing Sensitive Personal Data<\/strong>
        These include:<\/li>\n<\/ol>\n\n\n\n
          \n
        • Biometric and genetic data<\/li>\n\n\n\n
        • Data on race, religion, or sexual orientation<\/li>\n\n\n\n
        • Health-related information<\/li>\n<\/ul>\n\n\n\n

          Processing is only permitted in clearly defined cases set by law.<\/p>\n\n\n\n

            \n
          1. Mandatory Breach Notification Requirements<\/strong>
            Companies will be required to notify the National Data Protection Authority of data breaches within 72 hours of discovery.<\/li>\n<\/ol>\n\n\n\n

            \ud83d\udcb8 What Are the Penalties?<\/strong><\/p>\n\n\n\n

              \n
            • Up to UAH 20 million for individuals<\/li>\n\n\n\n
            • Up to UAH 150 million or 8% of annual turnover \u2014 for legal entities<\/li>\n<\/ul>\n\n\n\n

              Non-compliance can be costly, even for small businesses.<\/p>\n\n\n\n

              \u2705 How to Prepare?<\/strong><\/p>\n\n\n\n

                \n
              • Conduct a data processing audit: identify what data you collect and how it is used<\/li>\n\n\n\n
              • Develop privacy policies<\/li>\n\n\n\n
              • Appoint a DPO \u2014 either an internal specialist or an external consultant<\/li>\n\n\n\n
              • Implement data breach response procedures<\/li>\n<\/ul>\n\n\n\n

                \ud83d\udcde Need Assistance?<\/strong><\/p>\n\n\n\n

                GLS Law Company specializes in helping businesses align with new legal requirements. We\u2019ll assist with audits, documentation, internal policies, and provide consultations on all aspects of personal data protection in Ukraine.<\/p>\n\n\n\n

                \u27a1\ufe0f Learn more about legal business support
                \u27a1\ufe0f Get a GDPR compliance consultation
                \u27a1\ufe0f Contact us for cooperation<\/p>\n\n\n\n

                GLS Law Company \u2014 trusted legal support for businesses in Ukraine and beyond.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

                \ud83d\udccc New Legislation: What to Expect for Businesses in 2025? The Verkhovna Rada of Ukraine has passed Draft Law No. 8153 “On the Protection of Personal Data” in the first reading, aligning national legislation with GDPR standards. The final version is expected to be adopted in 2025. \u26a0\ufe0f Key Changes for Companies Collecting consent for […]<\/p>\n","protected":false},"author":4,"featured_media":12064,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[285],"tags":[],"class_list":["post-12078","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-a-broader-topic"],"_links":{"self":[{"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/posts\/12078","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/comments?post=12078"}],"version-history":[{"count":1,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/posts\/12078\/revisions"}],"predecessor-version":[{"id":12079,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/posts\/12078\/revisions\/12079"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/media\/12064"}],"wp:attachment":[{"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/media?parent=12078"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/categories?post=12078"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gls-law.company\/en\/wp-json\/wp\/v2\/tags?post=12078"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}