New Personal Data Law in Ukraine: What Will Change for Businesses in 2025
📌 New Legislation: What to Expect for Businesses in 2025?
The Verkhovna Rada of Ukraine has passed Draft Law No. 8153 “On the Protection of Personal Data” in the first reading, aligning national legislation with GDPR standards. The final version is expected to be adopted in 2025.
⚠️ Key Changes for Companies
- Appointment of a Data Protection Officer (DPO)
Every business processing personal data will be required to appoint a Data Protection Officer. This person will be responsible for compliance monitoring, liaising with government authorities, and advising on risks and procedures. - Updated Consent Requirements
Consent for data processing must be:
- Explicit (active action, checkbox, signature, etc.)
- Specific — clearly stating the purpose of processing
- Freely given — without coercion
- Informed — with accessible information about the processing
Collecting consent for HR documentation will be restricted — a valid employment contract and legal compliance will suffice.
- Ban on Processing Sensitive Personal Data
These include:
- Biometric and genetic data
- Data on race, religion, or sexual orientation
- Health-related information
Processing is only permitted in clearly defined cases set by law.
- Mandatory Breach Notification Requirements
Companies will be required to notify the National Data Protection Authority of data breaches within 72 hours of discovery.
💸 What Are the Penalties?
- Up to UAH 20 million for individuals
- Up to UAH 150 million or 8% of annual turnover — for legal entities
Non-compliance can be costly, even for small businesses.
✅ How to Prepare?
- Conduct a data processing audit: identify what data you collect and how it is used
- Develop privacy policies
- Appoint a DPO — either an internal specialist or an external consultant
- Implement data breach response procedures
📞 Need Assistance?
GLS Law Company specializes in helping businesses align with new legal requirements. We’ll assist with audits, documentation, internal policies, and provide consultations on all aspects of personal data protection in Ukraine.
➡️ Learn more about legal business support
➡️ Get a GDPR compliance consultation
➡️ Contact us for cooperation
GLS Law Company — trusted legal support for businesses in Ukraine and beyond.
