LEGAL REGULATION OF CYBERSECURITY IN UKRAINE: SYSTEMIC PROBLEMS AND EUROPEAN INTEGRATION PROSPECTS
DOI:
https://doi.org/10.66556/2522-4549.51.kramar-r1Keywords:
cybersecurity, legal regulation, Ukraine, international law, critical infrastructure, artificial intelligence, information security, criminal liabilityAbstract
The article is devoted to a comprehensive analysis of cybersecurity legal regulation in Ukraine, focusing on systemic problems and prospects for European integration. The aim of the study is a comprehensive analysis of cybersecurity legal regulation in Ukraine, identification of systemic problems, and assessment of European integration opportunities in the field of information security. The research employs systemic, comparative-legal, and normative analysis, as well as examination of international standards and EU legislation to evaluate the compliance of national laws with modern requirements. The study demonstrates that national legislation, including the Constitution of Ukraine, the Law "On the Basic Principles of Cybersecurity in Ukraine," and the Criminal Code, establishes the fundamental legal foundations for cybersecurity but contains fragmented provisions and unclear responsibilities of cybersecurity actors. Gaps in regulating emerging technologies, particularly artificial intelligence, and insufficient alignment with international standards, such as the Budapest Convention, GDPR, and NIS 2, were identified. Case analyses of cybersecurity incidents during martial law confirm the need for a more coordinated and adaptive approach to legal regulation. The scientific novelty lies in the comprehensive integration of national legislation analysis with international law in the context of digital transformation and martial law, allowing the development of a holistic model for assessing the effectiveness of cybersecurity legal regulation. The practical significance of the study is in providing a basis for strategic decision-making in state cybersecurity policy, improving legal regulation of critical infrastructure, and adapting European standards for national practice.References
1. Konstytutsiia Ukrainy: Zakon Ukrainy vid 28 chervnia 1996 roku № 254k/96-VR [Constitution of Ukraine]. (1996). https://zakon.rada.gov.ua/laws/show/254%D0%BA/96-%D0%B2%D1%80
2. Kryminalnyi kodeks Ukrainy: Zakon Ukrainy vid 5 kvitnia 2001 roku № 2341-III [Criminal Code of Ukraine]. (2001). https://zakon.rada.gov.ua/laws/show/2341-14
3. Pro zakhyst informatsii v informatsiino-telekomunikatsiinykh systemakh: Zakon Ukrainy vid 5 lypnia 1994 roku № 80/94-VR [On Protection of Information in Information and Telecommunication Systems]. (1994). https://zakon.rada.gov.ua/laws/show/80/94-%D0%B2%D1%80
4. Pro informatsiiu: Zakon Ukrainy vid 2 zhovtnia 1992 roku № 2657-XII [On Information]. (1992). https://zakon.rada.gov.ua/laws/show/2657-12
5. Pro osnovni zasady zabezpechennia kiberbezpeky Ukrainy: Zakon Ukrainy vid 5 zhovtnia 2017 roku № 2163-VIII [On the Basic Principles of Cybersecurity in Ukraine]. (2017). https://zakon.rada.gov.ua/laws/show/2163-19
6. Convention on Cybercrime. (2001). Council of Europe. https://www.coe.int/en/web/conventions/full-list/-/conventions/treaty/185
7. Baranov, O. A. (2014). Pro tlumachennia ta vyznachennia poniattia «kiberbezpeka» [On interpretation and definition of the concept of "cybersecurity"]. Pravova informatyka, 2(42), 54-62. https://ippi.org.ua/journal/107
8. Knysh, Z. I. (2025). Kiberbezpeka: aktualnyi stan normatyvno-pravovoi bazy ta perspektyvy yii rozvytku [Cybersecurity: current state of the regulatory framework and development prospects]. Istoryko-pravovyi chasopys, 1, 59-65. https://doi.org/10.32782/2409-4544/2025-1/8
9. Lyseiuk, A., & Svintsytska, T. (2024a). Rozvytok mizhnarodnoho spivrobitnytstva u sferi kiberbezpeky [Development of international cooperation in cybersecurity]. Law and Innovation Society, 2(23), 89-95. https://doi.org/10.37772/2309-9275-2024-2(23)-8
10. Lyseiuk, A., & Svintsytska, T. (2024b). Pravove zabezpechennia kiberbezpeky Ukrainy v umovakh voiennoho stanu ta yevrointehratsii [Legal support for Ukraine's cybersecurity under martial law and European integration]. Pravo ta innovatsii, 4(48), 32-38. https://doi.org/10.37772/2518-1718-2024-4(48)-4
11. Mazepa, S. (2025). Kiberbezpeka v Ukraini: suchasni vyklyky ta shliakhy vdoskonalennia zakonodavchoho rehuliuvannia [Cybersecurity in Ukraine: modern challenges and ways to improve legislative regulation]. Aktualni problemy pravoznavstva, 2(42), 164-171. https://doi.org/10.35774/app2025.02.164
12. Nikitenko, O., Zhuravel, I., Krymchanin, B., & Verbytskyi, A. (2025). Legal regulation in the field of internal information security as a component of Ukraine's national security. Metaverse Science, Society and Law, 1(1). https://doi.org/10.69635/mssl.2025.1.1.15
13. Palamarchuk, S., Palamarchuk, N., Shtonda, R., & Poberezhets, T. (2025). Sutnist kiberoboroni Ukrainy [The essence of Ukraine's cyber defense]. Cybersecurity: Education, Science, Technology, 2(30), 401-412. https://doi.org/10.28925/2663-4023.2025.30.909
14. Puzyrnyi, V., & Zakharchuk, I. (2025). Pravovi aspekty vykorystannia shtuchnoho intelektu u sferi kiberbezpeky [Legal aspects of using AI in cybersecurity]. Naukovyi visnyk Sivershchyny. Seriia: Pravo, 3(26), 58-69. https://doi.org/10.32755/sjlaw.2025.03.058
15. Romanova, O. M. (2024). Kiberbezpeka pid chas povnomasshtabnoho vtorhnennia RF [Cybersecurity during the full-scale invasion of the RF]. Chasopys Kyivskoho universytetu prava, 2, 56-59. https://doi.org/10.36695/2219-5521.2.2024.9
16. Semenenko, O., Kirsanov, S., Movchan, A., Sliusarenko, M., & Horhulenko, V. (2025). Addressing the legal gaps in AI regulation for national security: The case of Ukraine's defense sector. Law, State and Telecommunications Review, 17, 56-85. https://doi.org/10.26512/lstr.v17i2.56351
17. Siromatchenko, M. (2024). Pravovi aspekty zabezpechennia kiberbezpeky v Ukraini [Legal aspects of cybersecurity in Ukraine]. Visnyk Natsionalnoho universytetu "Lvivska politekhnika". Seriia: Yurydychni nauky, 11(1(41)), 314-320. https://doi.org/10.23939/law2024.41.314
18. Sopilko, I. M., & Cherevatiuk, V. B. (2022). Cyber security and personal rights under the legislation of Ukraine. Journal of International Legal Communication, 6(3), 18-25. https://doi.org/10.32612/uw.27201643.2022.6.pp.18-25
19. Stets, V. (2019). Teoretyko-pravovi problemy vyznachennia sutnosti kiberbezpeky yak skladovoi informatsiinoi bezpeky [Theoretical and legal problems of defining cybersecurity as a component of information security]. Aktualni problemy derzhavnoho upravlinnia, 4(80), 24-28. https://doi.org/10.35432/1993-8330appa4802019194098
20. Foros, H. V., & Zhohov, V. S. (2019). Osoblyvosti traktuvannia poniattia «kiberbezpeka» v suchasnii yurydychnii nautsi [Features of interpreting the concept of "cybersecurity" in modern legal science]. Pravova derzhava, 33, 128-134. https://doi.org/10.18524/2411-2054.2019.33.162068
21. Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (NIS 2 Directive). (2022). Official Journal of the European Union, L 333. https://eur-lex.europa.eu/eli/dir/2022/2555/oj/eng
22. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation). (2016). Official Journal of the European Union, L 119. https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng
