Law of Ukraine On Personal Data Protection — cross-border transfer of personal data

Art. 29 permits transferring personal data to foreign recipients only where the destination state ensures adequate protection of personal data, with member states of the European Economic Area and states party to Council of Europe Convention 108 treated as meeting that standard, and otherwise only on the specific grounds the Article lists (including the data subject's unambiguous consent and necessity for a contract in the data subject's interest). What Ukraine does NOT have is the modern toolkit: there is no enacted standard-contractual-clause or binding-corporate-rules regime to fall back on when the destination is not adequate, which makes the consent and contract grounds do most of the work in practice. Comprehensive reform aligning Ukrainian law with the GDPR has been under parliamentary consideration for several years without enactment. Marked 'check': the official English translation could not be retrieved directly and the article's content was triangulated across independent legal-reference sources — confirm the current text with the Ukrainian Parliament Commissioner for Human Rights, which acts as the supervisory authority.