UA Electronic Communications Law
Law of Ukraine on Electronic Communications — Verkhovna Rada of Ukraine (the law) / National Commission for State Regulation of Electronic Communications, Radio Frequency Spectrum and Postal Services (secondary acts)
Also known as: Закон про електронні комунікації, ЗУ 1089-IX, Закон № 1089-IX, Про електронні комунікації, НКЕК
Official site Official change log Subscribe to UA Electronic Communications Law (RSS)
At a glance
- Current version
- Law No. 1089-IX (edition of 30 May 2026, Law No. 4812-IX)
- Published 30 May 2026. source
- Status
- In force
- Next deadline
- None announced
- Who must comply
- Providers of electronic communication networks and services, users of radio frequency spectrum and others in the electronic communications sector in Ukraine. source
- How it is assessed
- Providers themselves take technical and organisational measures for network security and are answerable for keeping end-user data safe. source
- Authority
- A law of the Verkhovna Rada; the regulatory body, a central executive body with special status for electronic communications, spectrum and postal services, applies sanctions (Article 126). source
- Enforced by
- The regulatory body applies administrative-economic sanctions, including fines tied to income or set in tax-free minimum incomes of citizens. source
- Last change
Ukrainian law on electronic communications (No. 1089-IX). Two of its articles are what a security officer is here for: Article 31, "Ensuring the security of electronic communications networks", which puts responsibility for the security and resilience of public networks on the providers that operate them, and Article 119, "Protection of information about the end user and the electronic communications services provided", which makes providers answerable for keeping end-user data safe. The requirements that give those articles effect are issued by the national regulator as separately registered resolutions.
Recent changes
-
Info
Changes introduced to Article 43 of the Law on Electronic Communications to counter offenses
Changes are being introduced to Article 43 of the Law of Ukraine "On Electronic Communications" to strengthen legal mechanisms for countering offenses that threaten the functioning …
Key dates
No upcoming datesAmendments
-
Law No. 1089-IX (edition of 30 May 2026, Law No. 4812-IX) AmendmentCurrent text
Law No. 4812-IX of 10 March 2026 added point 19 to Article 43(2) on state regulation in special-use radio frequency bands. source
-
Edition of 27 February 2026 (Law No. 4670-IX) Amendment
Amended by Law No. 4670-IX of 4 November 2025 on settling certain issues in electronic communications. source
-
Edition of 1 January 2026 (Laws No. 3727-IX, 4345-IX, 4695-IX) Amendment
Provisions of Law No. 3727-IX on EU roaming rules and Law No. 4345-IX implementing EU electronic communications law took effect, with the 2026 State Budget Law. source
-
Edition of 8 August 2025 (Law No. 4321-IX) Amendment
Law No. 4321-IX of 25 March 2025 on using land plots to build digital infrastructure amended a number of articles, including Article 31(1) on responsibility for the security and resilience of public networks. source
-
Law No. 1089-IX (as adopted) Major version
Adopted on 16 December 2020; it entered into force on 1 January 2022 (Section XIX, point 1). source
Who it applies to
The law covers electronic communications networks and services and spectrum use; providers of public networks carry the security duties.
- Scope
- Relations in electronic communications and radio frequency spectrum, including provision of services, access to networks, competition, numbering and user protection (Article 1(1)). source
- Excluded
- Networks not interconnected with public networks (except spectrum matters), audiovisual content regulation, and Internet interconnection, routing and transit governed by international organisations are outside its scope (Article 1(2)). source
- Pending edition
- A further edition under Law No. 4840-IX on state supervision takes effect from the day martial law in Ukraine ends or is lifted. source
How compliance is assessed
Providers themselves take technical and organisational measures for network security and are answerable for keeping end-user data safe.
- Network security
- Providers of networks and/or services are responsible for the security and resilience of public networks (except damage from deliberate unlawful acts of third parties), and must take technical and organisational measures to protect integrity, continuity of service and prevent unauthorised access (Article 31). source
- End-user data
- Service providers must keep end-user data safe, including personal data, the content and routing of communications, location data and call attempts (Article 119(1)). source
- Disclosure of service data
- Information on services an end user received may be disclosed with the user's prior consent or as the Constitution and laws provide (Article 119(2)). source
Enforcement and penalties
The regulatory body applies administrative-economic sanctions, including fines tied to income or set in tax-free minimum incomes of citizens.
0.1% to 0.3% of income
Article 126(1)(6), for failing to comply with an order of the regulatory body to remedy violations, refusing an inspection or withholding documents needed for supervision. source
1,000 to 5,000 tax-free minimum incomes
Article 126(1)(5), per violation of the law's requirements on providing services to end users. source
- Time limits
- Sanctions may be applied within six months of detecting a violation and no later than one year after it was committed; decisions can be appealed in court (Article 127). source
Documents
Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 25 September 2026. Subscribe to UA Electronic Communications Law (RSS)