2026-01-21T12:10:42+00:00
“External compliance,” or your website = your face
(All characters are fictional, and any similarities are coincidental).
- Good afternoon, we would like one GDPR compliance, please.
- What do you need it for?
- So that our EU customers like our website and don't ask our legal department any stupid questions :) Please make us all the banners and privacy policy.
- Of course. But that's not GDPR compliance. It's just a tiny part of it. Let me explain.
January 21, 2026 1 min
2025-10-10T08:23:25+00:00
What is the world of internal policies and assessments under the GDPR like?
How you treat personal data in your company is not just about what is public and visible to the human eye. It is also about how you manage internal processes for working with personal data, its movement, and security. For this purpose, there are internal policies and assessments, as well as special tools that help companies maintain control over data flow and other processes, ensuring that data is processed correctly.
In this article, I will help you understand the main types of policies and assessments: what is mandatory, what is optional, where to start, and how to approach this process correctly.
October 10, 2025 1 min
2025-04-30T11:34:08+00:00
Scraping for training generative AI models. How participants on different sides of the process should interact
Generative models require large amounts of data for training. Depending on the needs, website scraping is often used to collect data.
April 30, 2025 1 min
2025-04-28T14:23:52+00:00
What is data protection legislation, and when does it apply to your company?
Imagine yourself in the middle of a maze. Endless green walls, green grass under your feet, and you are all green as you search for a way out – that's how a company feels when it starts to navigate data protection legislation. To understand what your responsibilities are, you need to understand where those responsibilities are written.
April 28, 2025 1 min
2025-03-24T10:50:44+00:00
Why do Ukrainian companies need GDPR risk assessment?
The short answer: GDPR risk assessment is necessary to enter the European market wisely and with minimized risks under GDPR.
But let’s start with the basics.
March 24, 2025 1 min
2025-03-19T14:24:08+00:00
AI and personal data: advice from the European regulator EDPB
The hype surrounding AI continues unabated. Every developer/owner/investor (underline as appropriate) wants to integrate AI into their product or launch a new one that is “enhanced” by artificial intelligence.
March 19, 2025 1 min
2024-12-27T12:33:46+00:00
How to use legitimate interest under the GDPR: recent clarifications from the regulator
Legitimate interest is one of the grounds for the lawful processing of personal data under the EU General Data Protection Regulation (GDPR). Companies have started to apply legitimate interest to almost all situations where they are interested in the outcome of such processing.
December 27, 2024 2 min
2024-09-03T09:58:13+00:00
ICLG Guide on Data Protection in Ukraine 2024 is published
Our partner Oksana Zadniprovska has contributed to the Data Protection Laws and Regulations Report (2024) in part of Ukraine.
September 3, 2024 1 min
2024-05-17T10:50:59+00:00
Open personal data: how to work with it
Person 5 stretched with satisfaction: their data is safe. In the register of court decisions, they are only Person 5. But they didn’t know that the day after tomorrow, skillful marketers would get to another open registry and flood their inbox with paper spam. After all, it’s open data, so it’s okay. Why is it not? Read this article for AIN about open data and how to use it without violating the privacy of Ukrainians.
May 17, 2024 2 min
2024-03-26T15:01:50+00:00
Is ICO asking you to pay data protection registration fee?
Anna Petrushko and Oksana Zadniprovska prepared this material for those businesses that are data controllers in the UK.
March 26, 2024 1 min
2024-02-29T14:55:05+00:00
Civil claims in Ukraine for personal data protection
Captain Obvious is with you. We are pleased to bring to your attention an article on how Ukrainian courts do not understand personal data protection legislation.
February 29, 2024 2 min
2023-12-18T16:54:18+00:00
CJEU decision and non-pecuniary damage in personal data cases
Let’s dream about a bright future. 2029. Ukraine is in the EU, Russian War Ship went f*ck itself (haha). Let’s say our Supreme Court appeals to the EU Court of Justice and asks for clarification on a few issues regarding the GDPR. The court is very interested in how to award non-pecuniary damage to people whose data was published online after a large-scale data breach as a result of a hacker attack.
December 18, 2023 1 min
2023-08-04T14:20:35+00:00
How to transfer data to the US under GDPR 3.0: EU-U.S. Data Privacy Framework – briefly and clearly
Previously, Oksana Zadniprovska, Partner at Axon Partners, wrote a column for AIN.UA about the rules for transferring personal data to the United States. Recently, there have been important changes – the EU has recognized the United States as an adequate jurisdiction for data transfer. Read on to discover when this will work and what it means for IT business.
August 4, 2023 1 min
2023-03-23T16:00:38+00:00
2021-06-09T13:43:18+00:00
How to write a public offer yourself? And is it necessary at all?
Especially for AIN.Business, Axon Partners lawyer Kateryna Nalyvaiko explained what a public offer is, how to draft it correctly, and whether anything would change if you called it “Terms of Use.”
June 9, 2021 1 min
2018-08-16T14:58:46+00:00
2018-07-15T09:11:12+00:00
2018-05-22T09:39:29+00:00
2018-03-15T11:53:03+00:00
2016-08-11T09:22:24+00:00