Ukraine - AI Regulation Roadmap

Overview

The Roadmap for the Regulation of Artificial Intelligence in Ukraine was presented in October 2023 by the Ministry of Digital Transformation in collaboration with the Expert Committee on the Development of Artificial Intelligence in Ukraine. This landmark framework establishes Ukraine's comprehensive strategy for AI governance, emerging from extensive consultations with national institutions, civil society organizations, international partners, and business stakeholders. The roadmap implements a distinctive two-stage approach: an initial preparatory phase emphasizing voluntary compliance, business support tools, and self-regulatory mechanisms, followed by a second phase introducing binding legislation aligned with the European Union's AI Act. This phased strategy allows Ukrainian businesses to adapt gradually while building a culture of responsible AI development, avoiding the potential disruption that immediate comprehensive regulation might cause to Ukraine's thriving AI sector. The roadmap rests on five foundational principles that guide its implementation: providing services and tools before imposing requirements, learning from international regulatory experiences, fostering partnership between government and industry, maintaining a global perspective that accounts for EU extraterritoriality, and equipping enterprises for international competitiveness. The Expert Committee, established in December 2019 under the Ministry's oversight, coordinates implementation through four specialized working groups covering public administration, education and science, security and defense, and regulation. This framework represents Ukraine's strategic response to the global AI governance challenge, balancing innovation promotion with human rights protection while pursuing European integration objectives.

Definitions

The Roadmap establishes key terminology for Ukraine's AI regulatory framework. Bottom-up Regulation describes an approach where regulatory frameworks emerge from industry self-regulation and voluntary standards before government-imposed binding requirements, allowing businesses to shape governance mechanisms organically. Regulatory Sandbox refers to a controlled testing environment where AI developers can evaluate their systems against future regulatory requirements, receiving feedback and guidance before full market deployment, with entry restricted to systems with medium or high human rights impact. AI System Labeling means mechanisms enabling consumers and users to identify AI-powered products and services, promoting transparency about automated decision-making and AI involvement. Voluntary Codes of Conduct are industry-developed standards for responsible AI development and deployment, adopted without legal mandate but encouraged by government support and recognition. Extra-Legislative Tools encompasses preparatory measures provided to businesses before formal legislation enactment, including guidance documents, assessment methodologies, and capacity-building resources. Service Function describes the government's role in supporting businesses to prepare for future regulation rather than immediately imposing binding requirements. Self-Regulation means industry-led governance where companies establish and enforce standards among themselves, with government facilitation and oversight but without direct legal mandate. Human Rights Impact Assessment refers to evaluating AI systems for potential effects on fundamental rights, privacy, non-discrimination, and democratic participation. Sectoral Guidelines are domain-specific recommendations for responsible AI use adapted to particular fields such as media, education, healthcare, or public administration. The roadmap emphasizes that these tools and approaches serve preparatory purposes, enabling a smooth transition to eventual binding legislation aligned with European standards while building Ukraine's capacity for effective AI governance.

Governance and Institutional Framework

The governance structure implementing the Roadmap centers on the Ministry of Digital Transformation of Ukraine, which serves as the primary coordinating body for AI regulatory policy development and implementation. The Ministry operates in close partnership with the Expert Committee on the Development of Artificial Intelligence in Ukraine, established December 21, 2019, specifically to advance Ukraine's competitiveness in the artificial intelligence field. The Expert Committee is chaired by Oleksiy Molchanovskyi, with Timofiy Milovanov serving as Co-Chairman responsible for regulation and Deputy Minister Oleksandr Bornyakov representing the Ministry's interests. The Committee operates through four specialized working groups: AI + Public Administration (headed by Andriy Zablovskyi) addresses AI applications in government services and administrative functions; AI + Education/Science (headed by Dmytro Chumachenko) focuses on AI in educational settings and research institutions; AI + Security/Defense examines AI applications for national security purposes; and AI + Regulation (co-chaired by Timofiy Milovanov) develops regulatory frameworks and compliance mechanisms. The Cabinet of Ministers of Ukraine provides overall strategic direction and approves major policy decisions related to AI regulation. Implementation involves multi-stakeholder participation including civil society organizations that championed human rights considerations, academic institutions contributing technical expertise, private sector representatives ensuring business feasibility, and international partners providing comparative regulatory insights. The governance framework emphasizes collaborative standard-setting rather than top-down imposition, reflecting the roadmap's bottom-up philosophical approach. Coordination extends to sector-specific regulators responsible for implementing sectoral guidelines within their domains, such as the National Council of Ukraine on Television and Radio Broadcasting for media applications. This distributed governance model ensures regulatory approaches are adapted to sector-specific contexts while maintaining alignment with overarching principles and EU standards.

Key Focus Areas

• Human Rights Protection: represents the paramount concern, with emphasis on safeguarding fundamental rights and freedoms when citizens interact with AI systems, particularly addressing privacy, non-discrimination, and autonomous decision-making.
• Personal Data Protection: focuses on ensuring AI systems process personal information in accordance with international standards, particularly GDPR-aligned frameworks, protecting Ukrainian citizens' privacy rights.
• EU Market Preparation: aims to ready Ukrainian AI companies for European market entry by building familiarity with EU AI Act requirements, ensuring regulatory alignment facilitates rather than hinders market access.
• Regulatory Sandbox Development: involves creating controlled testing environments where developers can evaluate AI systems against regulatory requirements, with particular focus on systems with medium or high human rights impact.
• Assessment Methodology Creation: encompasses developing frameworks for evaluating AI systems' compliance with regulatory standards, risk levels, and human rights impacts.
• AI System Labeling: promotes transparency by establishing mechanisms enabling users to identify AI-powered products and services, building consumer awareness and trust.
• Voluntary Code Development: encourages industry-led standards for responsible AI development and deployment, fostering a culture of ethical innovation.
• Sectoral Guideline Implementation: involves creating domain-specific recommendations for AI use in media, education, marketing, public administration, and other sectors, tailored to each field's unique characteristics and challenges.
• International Alignment: prioritizes harmonizing Ukrainian regulations with EU standards and global best practices, facilitating Ukraine's European integration objectives.
• Self-Regulation Culture Building: focuses on developing industry capacity and commitment to responsible AI practices before introducing binding legal requirements.
• Business Competitiveness: ensures regulatory approaches support rather than hinder Ukrainian AI companies' global market participation.
• Multi-Stakeholder Engagement: maintains ongoing dialogue between government, industry, civil society, and academia throughout implementation. These focus areas reflect the roadmap's dual objectives: protecting citizens' rights while supporting Ukraine's AI sector growth and international competitiveness.

Implementation Framework

The Roadmap's implementation proceeds through a distinctive two-stage approach designed to balance immediate needs with long-term regulatory objectives. Stage One: Preparatory Phase (2023-2025) emphasizes providing "extra-legislative" tools to businesses and government before introducing binding requirements. During this phase, the Ministry of Digital Transformation develops and deploys several key instruments: the Regulatory Sandbox launches to allow AI developers to test systems against future requirements, with access limited to products with medium or high human rights impact; Assessment Methodologies are published providing frameworks for evaluating AI systems' risk levels and compliance prospects; Labeling Mechanisms are introduced enabling transparent identification of AI-powered products; Voluntary Codes of Conduct are developed collaboratively with industry, establishing baseline standards for responsible AI development; and Sectoral Guidelines are released for specific domains including media, education, marketing, and public administration. This preparatory phase incorporates the White Paper on AI Regulation (June 2024) that elaborates first-stage tools in detail, providing businesses with concrete guidance. Stage Two: Legislative Phase (2025 onwards) involves developing and enacting binding legislation aligned with the EU AI Act, transitioning from voluntary compliance to legal requirements. The legislative phase begins after sufficient business preparation and EU AI Act finalization, ensuring Ukrainian law reflects both international standards and domestic implementation experience from Stage One. Implementation relies on the Bottom-Up Methodology, where regulatory frameworks emerge from business practices and industry self-regulation rather than imposed top-down, allowing organic development of governance mechanisms appropriate to Ukrainian context. Partnership Models ensure government and business collaborate on standard-setting rather than operating adversarially. Continuous Stakeholder Engagement maintains dialogue throughout both phases, incorporating feedback from civil society, academia, and international partners. Adaptive Management allows adjustment of timelines and approaches based on technological evolution, EU AI Act developments, and implementation lessons learned. Capacity Building strengthens both business capability to comply with future requirements and government capacity to oversee AI systems effectively. The framework explicitly recognizes the EU AI Act's extraterritorial implications, making alignment essential for Ukrainian companies seeking European market access regardless of domestic legal requirements.

Monitoring and Evaluation

The Roadmap establishes monitoring mechanisms coordinated by the Ministry of Digital Transformation and Expert Committee on AI Development to track implementation progress and adapt strategies as needed. Quarterly Progress Reviews assess advancement on roadmap deliverables, including regulatory sandbox establishment, assessment methodology development, voluntary code adoption, and sectoral guideline implementation. Stakeholder Feedback Mechanisms gather input from businesses participating in preparatory tools, civil society monitoring rights implications, and international partners providing comparative insights. Regulatory Sandbox Monitoring tracks systems tested within the sandbox environment, lessons learned from evaluation processes, and regulatory requirement refinements based on testing outcomes. Voluntary Code Adoption Tracking measures industry uptake of self-regulatory standards, identifying sectors with high adoption and those requiring additional support or incentives. Sectoral Guideline Impact Assessment evaluates how domain-specific recommendations affect AI deployment practices, rights protection, and sector-specific outcomes in media, education, and other fields. EU Alignment Tracking continuously monitors EU AI Act developments, assessing implications for Ukrainian regulatory approach and business preparation needs. International Benchmarking compares Ukraine's regulatory progress with other countries pursuing AI governance, particularly EU candidate countries and regional peers. Business Readiness Assessments evaluate Ukrainian AI companies' preparedness for eventual binding regulation, identifying gaps requiring additional preparatory support. Rights Impact Monitoring tracks AI systems' effects on fundamental rights, privacy, non-discrimination, and democratic participation, identifying emerging concerns requiring regulatory attention. Working Group Reporting involves the Expert Committee's four specialized groups providing domain-specific progress updates and recommendations for strategy adjustments. Annual Strategic Reviews provide comprehensive assessments of roadmap implementation, determining whether timeline adjustments are needed based on EU developments, technological changes, or Ukrainian business capacity. Public Transparency ensures regular publication of implementation progress through government websites, stakeholder briefings, and public consultations. The monitoring framework maintains flexibility to respond to Ukraine's evolving circumstances, including the ongoing war's impact on regulatory priorities and resources, while maintaining commitment to eventual EU alignment and rights protection.

Penalties, Liability, and Appeals

The Roadmap establishes principles for accountability frameworks while recognizing that specific penalties and liability regimes will be defined during Stage Two when binding legislation is enacted. Stage One Approach (2023-2025) emphasizes voluntary compliance without legal penalties, as this preparatory phase operates through incentives rather than enforcement. During this period, non-compliance with voluntary codes or sectoral guidelines carries no legal consequences, though businesses may face reputational risks or reduced access to government support programs. The Regulatory Sandbox operates as a learning environment rather than enforcement mechanism, with participation providing developers guidance on future compliance rather than imposing current penalties. Future Liability Framework Principles outlined in the roadmap anticipate that Stage Two legislation will establish clear liability rules addressing responsibility when AI systems cause harm, whether through malfunction, bias, privacy violations, or other negative impacts. Developer Accountability will include obligations to design systems with appropriate safeguards, conduct risk assessments, provide transparency about capabilities and limitations, and maintain human oversight mechanisms. Deployer Responsibilities will cover organizations implementing AI systems, including proper training, monitoring, and maintaining ability to intervene in automated processes. Rights Redress Mechanisms will enable individuals to contest decisions made by or involving AI systems, particularly in high-stakes domains such as employment, social benefits, healthcare, and criminal justice. Regulatory Oversight will empower sector-specific agencies to investigate complaints, conduct audits, and enforce compliance once binding requirements exist. Appeal Processes will provide pathways for challenging automated decisions, with requirements for human review of consequential AI-driven outcomes. Proportionate Enforcement anticipates that penalties will be calibrated to violation severity, business size, and whether non-compliance was intentional or negligent. The roadmap emphasizes that eventual liability frameworks must balance innovation encouragement with meaningful protection and remedies, learning from EU AI Act approaches while adapting to Ukrainian legal context. Transitional Arrangements will provide businesses reasonable time to achieve compliance when Stage Two requirements take effect, avoiding sudden disruption to companies that participated in voluntary Stage One programs. The roadmap's philosophical approach prioritizes building a culture of responsibility during the preparatory phase, making eventual binding requirements more easily accepted and implemented when introduced.

Relationship to Other Instruments

The Roadmap for the Regulation of Artificial Intelligence in Ukraine serves as the operational framework implementing the strategic vision established in the Concept of Artificial Intelligence Development in Ukraine approved in December 2020. Where the Concept established broad objectives and principles for 2020-2030, the Roadmap translates these into concrete regulatory approaches and implementation timelines. The roadmap directly informed development of the White Paper on Artificial Intelligence Regulation in Ukraine published in June 2024, which elaborates Stage One tools in comprehensive detail, providing businesses with specific guidance on voluntary codes, regulatory sandbox participation, and sectoral guidelines. The roadmap's principles underpin sectoral guidelines developed for media (implementing Council of Europe standards), marketing and advertising (developed with industry associations), and education (integrating AI literacy initiatives), ensuring domain-specific approaches align with overarching regulatory philosophy. The roadmap explicitly anticipates alignment with the EU Artificial Intelligence Act, with Stage Two designed to mirror European requirements, facilitating Ukrainian companies' access to EU markets and supporting Ukraine's broader European integration commitments under the Ukraine-EU Association Agreement. The roadmap connects with Draft Law No. 8153 on Protection of Personal Data, which addresses AI-relevant issues of automated processing and algorithmic decision-making, providing complementary data protection framework necessary for comprehensive AI governance. Ukraine's signature of the Council of Europe Framework Convention on AI, Human Rights, Democracy, and Rule of Law in May 2025 provides international treaty foundation for the roadmap's emphasis on rights protection and democratic values. The roadmap aligns with OECD AI Principles and UNESCO Recommendations on the Ethics of AI, ensuring Ukrainian approaches reflect global consensus on responsible AI development. The framework relates to national security strategies through the Expert Committee's Security/Defense working group, particularly addressing AI applications in Ukraine's defense sector which gained prominence following Russia's 2022 invasion. The roadmap complements Ukraine's broader digital transformation strategy, supporting e-governance initiatives, digital infrastructure development, and IT sector growth championed by the Ministry. HUDERIA Pilot Participation connects the roadmap to Council of Europe initiatives for Human Rights, Democracy and Rule of Law Impact Assessment of AI systems, providing methodological resources for implementation. This web of relationships positions the roadmap as the central operational framework connecting Ukraine's strategic AI vision with sectoral implementations, international commitments, and eventual binding legislation.

International Alignment

The Roadmap prioritizes international regulatory alignment, particularly with European Union standards, reflecting Ukraine's strategic European integration objectives and AI companies' market access needs. EU AI Act Convergence represents the centerpiece of international alignment strategy, with Stage Two explicitly designed to enact legislation mirroring the European Union's comprehensive AI regulatory framework. This convergence serves dual purposes: facilitating Ukrainian companies' seamless access to European markets and demonstrating Ukraine's commitment to European regulatory standards as part of its EU candidacy. Extraterritorial Implications of the EU AI Act drive alignment urgency, as Ukrainian companies deploying AI systems in European markets must comply with EU requirements regardless of domestic Ukrainian law, making regulatory harmonization an economic imperative. OECD AI Principles inform the roadmap's core commitments, particularly emphasizing human-centered values, transparency, robustness, accountability, and respect for human rights and democratic values. Council of Europe Standards provide foundational framework for rights protection, with Ukraine's May 2025 signature of the Framework Convention on AI, Human Rights, Democracy, and Rule of Law creating binding international obligations aligned with roadmap principles. UNESCO Recommendations on Ethics of AI shape approaches to cultural diversity, inclusion, and human dignity protection in AI deployment. HUDERIA Methodology Participation involves Ukraine in Council of Europe's Human Rights, Democracy and Rule of Law Impact Assessment pilot initiative, providing practical tools for evaluating AI systems against rights standards. International Research Collaboration encourages Ukrainian institutions to participate in global AI research networks, joint projects, and knowledge exchange programs, ensuring Ukraine's regulatory approaches reflect cutting-edge technical understanding. Standards Harmonization adopts international technical standards for AI systems, facilitating interoperability and reducing trade barriers. Multi-lateral Governance Forums provide venues for Ukraine to contribute to evolving international AI norms, share implementation experiences, and learn from other countries' approaches, particularly EU candidate countries and Eastern European neighbors. Transatlantic Partnerships extend beyond Europe to include cooperation with United States, Canada, and other democratic AI leaders, diversifying Ukraine's international regulatory dialogue. The roadmap's international orientation gained additional strategic significance following Russia's 2022 invasion, as Ukraine deepened partnerships with Western democracies and accelerated European integration processes including digital and AI governance domains. This alignment serves not only technical regulatory purposes but also broader geopolitical objectives of anchoring Ukraine firmly within Euro-Atlantic institutional frameworks.

Implementation Timeline

Sources and References