Law of Ukraine "On Protection of Personal Data" of 01.06.2010 № 2297-VI

The present Law regulates relations related to the protection of personal data during its processing. The present Law does not apply to creation of databases of personal data and processing of personal.

Date of entry into force: January 1, 2011

• by natural persons – exclusively for non-professional personal or household needs;
• by journalists – in the process of performing official or professional duties;
• by professional creative workers – for performing creative activity.

• subject of personal data;
• owner of the personal data database;
• manager of the personal data database;
• third party;
• authorized state body in the issues of personal data protection;
• other bodies of state power and bodies of local self-government, whose scope of authority includes personal data protection.

• the purpose for processing of personal data must be formulated in laws, other normative-legal acts), provisions, statutory or other documents that regulate the activity of the personal data database owner, and conform to the legislation in the field of personal data protection;
• personal data must be precise, reliable, and be updated in case of necessity;
• the primary sources of data on a natural person are: documents issued in their name; documents signed by them; information provided by the person about themselves;
• processing of personal data is carried out for specific and lawful purposes, determined by consent of the subject of personal data, or in cases provided for by the laws of Ukraine, according to the procedure determined by the legislation;
• processing of personal data on a natural person is not allowed without their consent, except for cases determined by the law, and only in the interests of national security, economic welfare and human rights.

Article 7 of the present Law forbids processing of personal data on race or ethnicity, political, religious or world views, membership in political parties and trade unions, as well as data relating to health or sexual life.

• is carried out with an explicit consent of the subject of the personal data for such processing;
• is necessary to exercise rights and perform obligations in the sphere of labor relations, according to the law;
• is necessary to protect the interests of the subject of personal data or another person, in case of legal incapacity or severely restricted capacity of the subject of personal data;
• is done by a religious organization, public organization of a world-view nature, political party or trade union created according to the law, provided that such processing is related exclusively to the personal data of the members of such organizations or persons maintaining a stable contact with them due to the nature of their activity, and that the personal data is not disclosed to third parties without the consent of the subject of personal data;
• is necessary for rationale, satisfaction or protection of legal demands;
• is necessary for health care or treatment, provided that such data is processed by a medical man) or another employee of a health care institutions charged with protection of personal data;
• concerns criminal charges, court verdict, execution of legal authority by a state body to conduct operative investigation, counter-intelligence activity and combat terrorism;
• concerns data that was promulgated by the subject of the personal data.

• consent of the subject of personal data to processing of their personal data. The subject of personal data has the right to limit the right to process their personal data when granting consent;
• permission to process personal data granted to the personal data database owner according to the law, exclusively for the purposes of exercising their authority.

• collection of personal data;
• accumulation and storage of personal data;
• dissemination of personal data;
• destruction of personal data.

• authorized state body in the issues of personal data protection (the central body of executive power whose authority includes personal data protection, created according to the legislation);
• other bodies of state power and bodies of local self-government.