Data localization and regulation of non-personal data
Jump to
Data localization and regulation of non-personal data Start Comparison
Are there data localization/data residency or other types of laws that may require the retention and storage of data in the local jurisdiction, or prohibit the transfer of data out of the jurisdiction?

Last review date: 23 December 2024

Yes.

         other

The PDP does not require personal data to be stored in Ukraine or to have a local copy. 

There are, however, general accounting and bookkeeping standards that require keeping electronic copies or hardcopies of certain documents that might contain personal data for the purposes of tax, accounting and other compliance, for example, payroll lists, lists of employees, etc. 

There is also a local copy requirement applicable for banking secrecy information, which only applies to banks in Ukraine.

Does law or regulation impose mandatory requirements to share or make accessible non-personal data?

Last review date: 23 December 2024

         Obligation for public sector organizations to share or make accessible non-personal data

         Obligation for private organizations to share or make accessible non-personal health data

         Obligation for private organizations to share or make accessible non-personal financial data

There is currently no specific legislation in Ukraine that would establish mandatory requirements to share or provide access to non-personal data. However, there are some requirements regarding special types of information.

The main legal act regulating relatable issues is the Law of Ukraine “On Access to Public Information”. This law defines the principles of transparency, openness and equality in access to information held by public authorities (Art. 4).

In accordance with the Law of Ukraine “On financial services and financial companies”, financial service providers may provide information to individuals and organizations to perform their functions, subject to confidentiality. Information may be provided to notaries, courts, bailiffs and other authorities to protect rights and interests. The provisions apply to persons to whom claims have been assigned and to providers after the loss of the right to operate. The information may be provided to the authorities preventing money laundering, terrorist financing and proliferation of weapons of mass destruction (Art. 11).

What specific obligations do these data-sharing rules impose on private organizations?

Last review date: 23 December 2024

         Obligation to share data on request