Featured Galleries CLICK HERE to View the Video Presentation of the Opening of the "Holodomor Through the Eyes of Ukrainian Artists" Exhibition in Wash, D.C. Nov-Dec 2021 USUBC COLLECTION OF OVER 160 UKRAINE HISTORIC NEWS PHOTOGRAPHS 1918-1997 "HOLODOMOR 1932-33: THROUGH THE EYES OF UKRAINIAN ARTISTS" - COLLECTION OF POSTERS AND PAINTINGS USUBC COLLECTION OF HISTORIC PHOTOGRAPHS ABOUT LIFE AND CAREER OF IGOR SIKORSKY PHOTOGRAPHS - INVENTOR OF THE HELICOPTER Ten USUBC Historic Full Page Ads in the Kyiv Post
No More Need to Register Databases of Employees’ Personal Data
Baker & McKenzi, Kyiv, Ukraine, Thursday, December 20, 2012
Today, the new Law On Amending the Law of Ukraine “On Personal Data Protection”, dated 20 November 2012, (the "Amendment") has become effective. The Amendment has introduced significant changes to Ukrainian laws on personal data protection.
The Amendment, among other changes:
- provides more detailed regulation of cross-border personal data transfer;
- allows implicit acceptance of personal data processing;
- no longer requires companies to register personal databases in place for maintenance and realization of employment relations;
- allows processing and trans-border transfer of personal data of customers (counterparties) without prior consent;
- provides personal data subjects with the right to revoke consent for personal data processing; to reasonably object against data processing; to know the mechanism of automatic data processing;
- requires that corporate codes on compliance and personal data protection of professional associations must be greenlighted by the State Service of Ukraine on Personal Data Protection; and
- requires additional information for personal database registration: the scope of personal data processed, list of third parties-transferees and information on cross-border personal data transfers.
Cross-border personal data transfer
Trans-border transfer of personal data is only allowed provided that the receiving data subject is located in a state that provides adequate personal data protection. The Amendment indicates that the following states are deemed to be providing adequate personal data protection:
- the European Economic Area member states;
- the states that are a party to the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data;
- the states included in the respective list adopted by a resolution of the Cabinet of Ministers of Ukraine.
Implied consent
Explicit recognition of the validity of implicit consent for personal data processing has long been awaited by companies throughout business to customer operations and providers of online services. Under the Amendment, data processing consent is no longer required to be express, instead an implied one is now also allowed.
Corporate codes
The Amendment requires that professional associations must obtain approval from the State Service of Ukraine on Personal Data Protection for their corporate codes on compliance and personal data protection. However, Ukrainian law fails to define what constitutes a 'professional association'. Therefore, the scope of these provisions is not sufficiently clear and their practical application by the State Service of Ukraine on Personal Data Protection should be closely monitored.
Additional notes
This LEGAL ALERT is issued to inform Baker & McKenzie clients and other interested parties of legal developments that may affect or otherwise be of interest to them. The comments above do not constitute legal or other advice and should not be regarded as a substitute for specific advice in individual cases.
This may qualify as "Attorney Advertising" requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome.
Before you send e-mail to Baker & McKenzie, please be aware that your communications with us through this message will not create a lawyer-client relationship with us. Do not send us any information that you or anyone else considers to be confidential or secret unless we have first agreed to be your lawyers in that matter. Any information you send us before we agree to be your lawyers cannot be protected from disclosure.