Ukraine Law on Personal Data Protection (Law No. 2297-VI) UA-PDP-11: Processor Engagement and Contracts

Where processing is delegated to a processor, the owner must put in place a written agreement defining the scope, duration, security obligations, confidentiality, sub-processing rules and audit rights.