Taking the GDPR as a reference for privacy reform is seen
as a sensible move. The GDPR is a regulation that most
companies operating in Ukraine aim to comply with, and
therefore setting mirrored requirements
is business-friendly. In addition, the GDPR outperforms
current Ukrainian legislation in terms of data subject
protection.
When is reform expected?
If adopted, the Privacy Bill, which was submitted
on 25 October 2022, will take effect on 1 January 2024. If the
Privacy Bill is not passed until Summer 2023, the effective date
will be postponed. Parliament aims to make the Privacy Bill a
proper foundation for recognizing Ukraine as a country with an
adequate level of protection under the
GDPR, and it has rejected any new insertions that
are questionable. The previous iteration of a privacy bill
failed to pass Parliament due to severe intrusion
into the activities of internet service providers.