Kyiv, Ukraine, 21 March 2018 - The Ukraine Government has published a plan of measures on the implementation of the EU–Ukraine Association Agreement approved on 25 October 2017.
Para. 11 of this plan requires the Ukrainian Parliament Commissioner for Human Rights, the government entity responsible for data protection in Ukraine, to take action for the implementation of Article 15 of the EU–Ukraine Association Agreement and to revise legislation on the protection of personal data to bring it into compliance with Regulation (EC) 2016/679 (GDPR) by 25 May 2018.
The detailed action plan for the introduction of the GDPR-like regime in Ukraine includes:
- Drafting and submitting to the Cabinet of Ministers of Ukraine a bill on the introduction of appropriate amendments to the Law of Ukraine "On Protection of Personal Data"
- Elaborating on the bill with EU experts
- Providing support during consideration of the draft law by the Parliament of Ukraine
- Building necessary resources to support the implementation of the amended law
- Strengthening the institutional capacity of the Ukrainian Parliament Commissioner for Human Rights as an independent institution monitoring compliance with personal data protection legislation
While the established deadline for the adoption of the GDPR in Ukraine seems unrealistic and the Ukrainian Government is no stranger for missing deadlines it has established, it is clear that the adoption of the GDPR-like regime in Ukraine is inevitable and we can expect this to happen later this year or in 2019.
In this regard, it is important to note that businesses in Ukraine will be at a disadvantage compared to their EU counterparts in relation to the soon-to-be introduced GDPR-like regime in Ukraine, because they will likely have less time to prepare, and have historically lower levels of awareness of and compliance with data privacy regulations. Therefore, businesses in Ukraine should move compliance with the GDPR requirements high in the list of their priorities and start compiling necessary resources, data and expertise to allow an easy transition.