Skip to main content

    AI by country · Central and Eastern Europe

    AI in Ukraine: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Ukraine know before starting with AI?

    Ukraine has no dedicated AI law as of 29 October 2026. The Law on Personal Data Protection No. 2297-VI of 2010 applies to AI today, a new GDPR-style data law (bill No. 8153) is being prepared for second reading, and the Ministry of Digital Transformation follows a step-by-step roadmap towards an AI law aligned with the EU. A company should map where its AI makes decisions about people, check data transfers abroad, and prepare for the new data law.

    At a glance

    Ukraine at a glance

    Key facts about Ukraine
    Data protection lawLaw of Ukraine On Personal Data Protection No. 2297-VI of 1 June 2010, in force; bill No. 8153 to replace it is pending
    RegulatorUkrainian Parliament Commissioner for Human Rights
    AI policyMinistry of Digital Transformation AI regulation roadmap (October 2023) and White Paper. No dedicated AI law as of 29 October 2026
    Time zoneEET, UTC+2 in winter and UTC+3 in summer (India is 3.5 or 2.5 hours ahead)
    CurrencyUAH (Ukrainian hryvnia)
    Business languageUkrainian, with English common in technology firms

    Why now

    Why Ukraine is worth watching

    Each point links to the document it comes from.

    • The Ministry of Digital Transformation presented an AI regulation roadmap on 7 October 2023 with a bottom-up approach: tools for business first, such as voluntary codes of conduct and a White Paper, then a law.[3]

    • In June 2026 the ministry reported the first meeting of a working group on legal regulation of AI, with the aim of finishing a draft AI law aligned with EU approaches during 2026.[5]

    • The ministry reported that its national AI assistant on the Diia portal, launched in autumn 2025, had been used by over 350,000 people.[5]

    • The ministry's regulatory sandbox for AI and blockchain had received over 100 applications by July 2026. It focuses on GovTech, MedTech, DefenseTech, AgroTech, EdTech, energy, science and culture.[4]

    • Bill No. 8153 on personal data protection, registered in October 2022, was being prepared for second reading at its latest recorded stage in December 2025.[1]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Law of Ukraine On Personal Data Protection, No. 2297-VI

    In force2010People have the right to know how automatic processing of their data works and to protection from an automated decision that has legal consequences for them (Article 8). They can complain to the Commissioner or a court. The Commissioner for Human Rights supervises compliance (Articles 22 and 23).[2]

    Law No. 2297-VI: transfers abroad (Article 29)

    In force2010Data may go to countries with adequate protection. EEA states and signatories of the Council of Europe data protection convention are treated as adequate. Otherwise a transfer needs a listed ground, such as the person's unambiguous consent or guarantees from the controller. This matters when an AI service runs outside Ukraine.[2]

    Draft Law On Personal Data Protection (bill No. 8153)

    Draft2022It is meant to replace the 2010 law with rules closer to the GDPR. A parliamentary committee found in 2022 that it needed further work to align with Regulation (EU) 2016/679. It passed first reading and was being prepared for second reading at the latest stage we could see.[1]

    Planned AI law (Ministry of Digital Transformation)

    Draft2026The ministry says the law should follow EU approaches to AI regulation. We found no bill registered in Parliament as of 29 October 2026, so we do not state its duties.[5]

    Where AI fits first

    Where AI fits first

    Software and IT services for export

    Building AI features for EU clients, such as document search and support chatbots.

    The EU AI Act covers providers and deployers outside the EU where the AI output is used in the EU (Article 2).[6]

    Public services

    Assistants that help people find and complete government services in Ukrainian.

    The Diia portal has run a national AI assistant since autumn 2025, according to the ministry.[5]

    Health and agriculture technology

    Triage support and crop or field analysis, tested before launch.

    MedTech and AgroTech are focus areas of the ministry's regulatory sandbox, which offers legal, technical and business review.[4]

    Your first steps

    Your first steps

    1. List every AI tool in use and note which ones make or shape decisions about people.
    2. Offer a way to challenge automated decisions with legal effects, as Article 8 of the 2010 law gives people that protection.
    3. Map where each AI service stores data, and check the Article 29 grounds before any transfer abroad.
    4. Follow bill No. 8153 and plan for GDPR-style duties such as impact assessments and breach reporting.
    5. Consider signing the voluntary codes of conduct and using the guidance published under the ministry's roadmap.
    6. If your product is in a focus sector, consider applying to the ministry's AI sandbox before launch.
    7. If you sell AI services into the EU, check the EU AI Act duties that apply to you.

    AI services for Ukraine

    AI consulting and development for teams in Ukraine

    We work remotely with companies in Ukraine, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Indian hours of 9:30 to 18:30 at UTC+5:30 are 04:00 to 13:00 UTC. In winter Ukraine is on UTC+2, so a 9:00 to 17:00 Kyiv day overlaps from 09:00 to 15:00, about 6 hours; in summer, on UTC+3, the overlap is 09:00 to 16:00, about 7 hours.

    Questions

    Common questions about AI in Ukraine

    Does Ukraine have an AI law?

    Not as of 29 October 2026. The Ministry of Digital Transformation formed a working group in 2026 to draft one aligned with EU approaches. Until then, AI that uses personal data falls under Law No. 2297-VI.

    Who enforces data protection?

    The Ukrainian Parliament Commissioner for Human Rights. People can complain to the Commissioner or to a court.

    Is the new data protection law in force?

    No. Bill No. 8153 passed first reading and was being prepared for second reading at the latest stage recorded on the Parliament's website. Check the bill card for updates.

    Can we use an AI service hosted outside Ukraine?

    Yes, if the transfer meets Article 29. EEA states and signatories of the Council of Europe convention count as adequate; for other countries you need a listed ground such as consent or controller guarantees.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Verkhovna Rada of Ukraine, 2025-12-19. Bill card No. 8153, Draft Law On Personal Data Protection(itd.rada.gov.ua)
      Full title and what we used it for

      Bill card No. 8153, Draft Law On Personal Data Protection. Primary. Used for registration on 25 October 2022, the committee's EU-alignment finding, first reading and the status 'being prepared for second reading' as of 19 December 2025.

    2. [2] Kodeksy.com.ua (copy of the law), 2026-10-29. Law of Ukraine On Personal Data Protection No. 2297-VI of 1 June 2010(kodeksy.com.ua)
      Full title and what we used it for

      Law of Ukraine On Personal Data Protection No. 2297-VI of 1 June 2010. Private copy of the law, accessed on this date, because the Parliament's legal database could not be reached. Used for Articles 8, 22, 23 and 29. The site warns its copy may be out of date.

    3. [3] Government of Ukraine (Ministry of Digital Transformation), 2023-10-07. Regulation of artificial intelligence in Ukraine: the Ministry presente…(kmu.gov.ua)
      Full title and what we used it for

      Regulation of artificial intelligence in Ukraine: the Ministry presented a roadmap. Primary. Used for the bottom-up approach, voluntary codes and the White Paper plan.

    4. [4] Ministry of Digital Transformation of Ukraine, 2026-07-27. Regulatory sandboxes in the world and in Ukraine(thedigital.gov.ua)
      Full title and what we used it for

      Regulatory sandboxes in the world and in Ukraine. Primary. Used for the sandbox focus sectors, the type of review offered and over 100 applications.

    5. [5] Finance.ua, 2026-06-17. V Ukraini rozroblyat zakon pro shtuchnyi intelekt(news.finance.ua)
      Full title and what we used it for

      V Ukraini rozroblyat zakon pro shtuchnyi intelekt. Press report of a Ministry of Digital Transformation statement. Used for the working group, the 2026 aim for a draft AI law and the Diia AI assistant figures.

    6. [6] Official Journal of the European Union, 2024-07-12. Regulation (EU) 2024/1689 (Artificial Intelligence Act)(publications.europa.eu)
      Full title and what we used it for

      Regulation (EU) 2024/1689 (Artificial Intelligence Act). Primary text, read via the EU Publications Office. Used for Article 2(1)(c) on providers and deployers outside the EU.

    This is general information, not legal advice. Ukraine's data protection and AI laws are both being rewritten, and some facts come from press reports of ministry statements. Check with a qualified Ukrainian lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Ukraine?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score