UkraineDraft Law No. 8153, data subject rights
Draft Law No. 8153 (data subject rights: erasure, restriction, portability)
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights, Disclosure
What it requires
- Give a data subject in Ukraine the right to erasure of their personal data.
- Give a data subject in Ukraine the right to restriction of processing of their personal data.
- Give a data subject in Ukraine the right to receive their personal data in a portable format.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- CT.PO-P3Policies, processes, and procedures for enabling individuals’ data processing preferences and requests are established and in place.
- FINOS AIGF
- AIR-PREV-006Data Quality & Classification/Sensitivity
- AIR-DET-021Agent Decision Audit and Explainability
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
What this law does
Draft Law No. 8153 would add rights the current 2010 law does not carry in this form. It would add a right to erasure, a right to restriction of processing, and a right to data portability; the current law's own access, objection, rectification, and automated decision protections are recorded on the sibling instrument ua-zakon-ukrainy-pro-zakhyst-personalnykh-danykh in this file.
The draft has passed only a first reading and remained in second reading preparation as of the most recent source located, dated May 2026.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .