Olexander Martinenko , Olga Belyakova, Natalia Kushniruk and Artem Lukyanov write:
On 3 July 2013 the Ukrainian Parliament passed a law that significantly amends the Ukrainian Law On Personal Data Protection (the “Privacy Law”).
The principal changes to the Privacy Law are summarised below:
-
the state agency in charge of personal data protection matters in Ukraine will change. The State Service of Ukraine on Personal Data Protection is to be abolished and its functions will be transferred to the Ombudsmen;
-
the requirement to register personal databases will be cancelled and replaced with a duty to notify the Ombudsman of the processing of personal data that constitutes a special risk to the rights and freedoms of the data subjects (“High Risk Data”). The notification must be submitted by the data controller within 30 working days of when it starts processing the data. Types of data classified as High Risk Data and the data controllers bound by the notification requirement are to be decided by the Ombudsman by 1 October 2013. It remains unclear whether previously registered databases will need to be notified to the Ombudsman;
Read more of the changes on Lexology.