Cybercrime Law in Ukraine
Ukraine — the home country of the Computer Crime Research Center — addresses computer crime mainly through a dedicated section of its Criminal Code, supported by a framework cybersecurity statute.
Key laws
-
Criminal Code of Ukraine (Law No. 2341-III of 5 April 2001), Section XVI — “Criminal offences in the sphere of the use of electronic computing machines (computers), systems and computer networks and electronic communications networks”. As currently in force it contains:
- Art. 361 — unauthorised interference with the operation of information (automated), electronic communications and information-communication systems and networks. This article was recast by Law No. 2149-IX of 24 March 2022 and amended by Law No. 3342-IX of 23 August 2023, so older commentaries describe a different offence.
- Art. 361-1 — creating, distributing or selling malicious software or technical devices.
- Art. 361-2 — unauthorised sale or distribution of restricted-access information held in computers, systems, networks or on storage media.
- Art. 362 — unauthorised acts with information processed in computers, systems or networks, committed by a person who has a right of access to it.
- Art. 363 — breach of the rules for operating computers, systems and networks or of the rules for protecting the information processed in them.
- Art. 363-1 — obstructing the work of computers, systems or networks by mass distribution of electronic communications messages.
Articles 361-3, 361-4 and 362-1 were removed from the Code by Law No. 767-VII of 23 February 2014 and no longer exist; references to them in older material are out of date.
-
Law No. 2163-VIII of 5 October 2017 “On the Basic Principles of Ensuring Cybersecurity of Ukraine” — the framework statute defining the national cybersecurity system and the roles of the main state actors.
-
Law No. 2297-VI of 1 June 2010 “On Personal Data Protection” — Ukraine’s data-protection law.
-
Ukraine ratified the Budapest Convention on Cybercrime by Law No. 2824-IV of 7 September 2005; the Convention entered into force for Ukraine on 1 July 2006, which the Council of Europe Treaty Office records against Ukraine’s ratification of 10 March 2006.
Enforcement
The Cyberpolice Department of the National Police of Ukraine and the Security Service of Ukraine (SBU) investigate cybercrime, often in cooperation with international partners. The State Service of Special Communications and Information Protection (SSSCIP), which operates CERT-UA, leads technical cyber defence.
Plain-language overview, not legal advice. Statutes change, and Ukraine’s criminal law has been amended repeatedly since 2022 — read the current Criminal Code text linked above and consult a qualified lawyer for any specific question.
Sources verified 26 August 2026 against the official legislation database of the Verkhovna Rada (zakon.rada.gov.ua) and the Council of Europe Treaty Office. The article list and the repeal and amendment notes above were read from the current consolidated text of the Criminal Code.