AI laws and regulation in Ukraine

Low.

There is currently no dedicated AI law in force in Ukraine.

In Ukraine activities related to AI are regulated by a set of existing laws and regulations covering related sectors:

• Law of Ukraine “On Personal Data Protection” No. 2297-VI of 1 June 2010: establishes requirements for the legal grounds for data processing, data protection, and the rights of personal data subjects, including in cases involving the use of AI and automated systems.
• Law of Ukraine “On the Basic Principles of Ensuring Cybersecurity of Ukraine” No. 2163-VIII of 5 October 2017: sets out the general legal framework for cybersecurity and the protection of information systems in cyberspace.
• Law of Ukraine “On Cloud Services” No. 2075‑IX of 17 February 2022:   regulates legal relations related to the provision and use of cloud services and establishes requirements for data protection, when data and digital services are processed in cloud environments.
• Law of Ukraine “On Copyright and Related Rights” No.-2811 IX of 1 December 2022: regulates the protection of results of creative activity, including non-original objects generated by computer programs.
• Law of Ukraine “On Information” No. 2657 XII of 2 October 1992: establishes the general principles for the collection, storage, use, dissemination, and protection of information.

Oversight of AI use in Ukraine is not centralized within a single dedicated regulator. Instead, supervisory, policy‑making, and enforcement functions are exercised in a fragmented manner by several public authorities

• The Ministry of Digital Transformation of Ukraine is the primary authority responsible for shaping state policy in the field of AI development. It initiated and coordinates the Concept for the Development of Artificial Intelligence in Ukraine and develops roadmaps, strategies, and recommendations.
• The Ukrainian Parliament Commissioner for Human Rights (Ombudsman) exercises supervision and control in the area of personal data protection.
• State Service of Special Communications and Information Protection of Ukraine та CERT‑UA are responsible for oversight and response in the field of cybersecurity and the protection of information and communication systems.

In Ukraine, there are strategic documents and policies addressing artificial intelligence:

• The Concept for the Development of Artificial Intelligence in Ukraine and the action plan for its implementation define priority areas for AI development and establish the need to update the legal framework governing AI.
• The Roadmap for the Regulation of Artificial Intelligence in Ukraine emphasizes the need to implement the provisions of the EU AI Act and to provide businesses with tools to prepare for future AI regulation.
• The Ministry of Digital Transformation’s recommendations on the use of AI are non‑binding and may be applied in specific sectors (for example, for legal professionals and educational institutions).
• Methodological materials by the Ombudsman, the Ministry of Digital Transformation and with the support of the EU4DigitalUA focus on practical human rights and personal data considerations in the context of AI. These materials are non‑binding and recommendatory in nature.

Ukraine refers to international standards and guidelines in the field of AI at the level of policy and strategic documents. The Concept for the Development of Artificial Intelligence enshrines the OECD AI Principles.
Although ISO/IEC 42001:2023 is not yet mandatory in Ukraine, it may be applied by businesses on a voluntary basis.

Strategic policy documents declare the objective of adopting a standalone law on artificial intelligence, with the submission of a draft bill planned for the fourth quarter of 2026.

At the same time, there is currently no publicly available information indicating that Parliament is already directly working on the relevant draft legislation.

N/A.