UkraineDraft Law No. 8153, automated decision making
Draft Law No. 8153, arts. 18, 25 (automated individual decisions)
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights, Disclosure
As of .
What it requires
- This draft has passed only a first reading and is not yet law; no automated decision making duty currently attaches to it, and the following describe what enactment would require.
- Once enacted, disclose your automated decision making mechanisms to a data subject in Ukraine, under Article 18.
- Once enacted, do not base a decision that significantly affects a data subject in Ukraine solely on automated processing, including profiling, under Article 25.
What this law does
Article 18 of Draft Law No. 8153 would require a controller to disclose its automated decision making mechanisms to a data subject. Article 25 would prohibit a decision that significantly affects a data subject if that decision is based solely on automated processing, including profiling. None of this binds today: the draft has passed only a first reading and was being prepared for a second reading as of May 2026.
When LexLint raises it
When your app profile says your app makes high-risk automated decisions.