Background Checks in Ukraine: A Compliance Guide for Employers
Hire Top Talent Anywhere - No Entity Needed
Build your team in as little as 48 hours—no local company setup needed.
Table of Contents
What Is a Ukraine Background Check?
A Ukraine background check is the structured pre-employment verification a foreign employer runs on a Ukrainian candidate to confirm identity, employment history, education credentials, and (where lawful and consented) criminal-history or credit standing. The legal framework governing the process is Personal Data Protection Law No. 2297-VI, read with the Labour Code (KZpP) and (for criminal records) the Law on Information.
Ukraine treats background-check data as personal data, and certain categories (criminal history, health, biometric) as sensitive personal data requiring stricter handling. Any Ukraine background check must therefore satisfy three threshold tests: lawful basis for processing, candidate consent (express written consent for sensitive categories), and proportionality (no fishing expeditions). Non-compliant background checks expose the employer to data-protection complaints, civil claims, and inspectorate fines.
Legal Framework: Personal Data Protection Law (No. 2297-VI)
Personal Data Protection Law No. 2297-VI is the primary statute governing employee background checks in Ukraine. The law tracks GDPR principles closely: lawful basis, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability. The data controller (the prospective employer or its EOR) must have a documented lawful basis (consent, contract necessity, legal obligation, or legitimate interest), inform the candidate of the processing purpose and retention period, and allow the candidate to exercise data-subject rights (access, rectification, erasure where applicable).
Sensitive Personal Data and Express Written Consent
Sensitive personal data under Article 7 of Law 2297-VI includes data on racial or ethnic origin, political views, religious or philosophical beliefs, trade-union membership, health, sexual orientation, biometric data, and criminal-history data. Processing sensitive data requires the candidate’s express written consent in addition to a lawful basis. For Ukraine background check purposes, this means that any criminal-history check must be supported by a candidate-signed consent form clearly stating the purpose and the data categories collected.
Types of Ukraine Background Check
The four most common categories of Ukraine background check for foreign employers are: identity verification (legal identity, tax ID, passport), employment-history verification (previous roles, dates, reason for leaving), education-credential verification (degree, institution, year), and reference checks. Two further categories require explicit written consent and are restricted in scope: criminal-history checks and credit checks.
Identity and Right-to-Work Verification
Identity verification confirms the candidate’s legal identity using passport or national ID, the individual taxpayer number (RNOKPP), and (for foreign-resident candidates working in Ukraine) work-authorisation status. Identity verification is mandatory before any employment relationship begins and is part of standard onboarding under the Labour Code.
Employment and Education History Verification
Employment-history verification confirms previous roles and tenure with prior employers (typically by direct contact, with candidate consent). Education-credential verification confirms the degree, institution, and year, ideally directly with the issuing institution or via Ukraine’s Unified State Electronic Database on Education (EDEBO). Both categories are governed by Law 2297-VI and require candidate consent for the processing of personal data.
Criminal-History Check (Restricted)
Criminal-history checks are permitted only with the candidate’s express written consent, because criminal data is sensitive personal data under Law 2297-VI. The check is mandatory by statute for specific roles (teachers, civil servants, judges, certain financial-sector roles, work with children); for general commercial roles, criminal checks are uncommon and most Ukrainian candidates will resist them. Where required, the check is requested through a licensed Ukrainian provider or directly from the National Police of Ukraine.
Credit Check (Restricted, Rare Outside Banking)
Credit checks are permitted only with candidate consent and a demonstrable lawful basis (typically the position itself involves financial responsibility). Credit checks are rare outside the banking and financial-services sectors and are not standard practice for IT, product, design, marketing, or operations hires.
Reference Checks: Standard Practice with Consent
Reference checks are the most common form of Ukraine background check for IT and corporate roles, conducted by direct contact with named referees from prior employers. The candidate must provide written consent for the reference contact, and the referees themselves are processing personal data when they respond, so the referee should also be informed of the processing.
How Asanify Runs Reference Checks under Law 2297-VI
Asanify’s standard onboarding under our Employer of Record Ukraine service includes a candidate-consent reference-check workflow: the candidate provides 2 to 3 referees and signs a written consent for Asanify to contact them, Asanify contacts the referees with a structured set of role-relevant questions, and the responses are recorded against the employee file with the documented retention period. The process aligns with Personal Data Protection Law 2297-VI and standard market practice in Ukrainian IT and corporate hiring.
When Background Checks Are Mandatory by Statute
Specific Ukrainian statutes mandate criminal-history checks for defined roles, regardless of the employer’s general policy. Mandatory check categories include: teachers and educational-institution staff, civil servants, judges and judicial staff, prosecutors, certain financial-sector roles (banking, anti-money-laundering compliance), and roles that involve work with children. Where the role falls under one of these categories, the criminal-history check is not optional and is part of the statutory hiring procedure.
Background Checks for Foreign-Resident Candidates Working in Ukraine
Where the candidate is a foreign national legally working in Ukraine, the standard Ukraine background check categories still apply, with two additional considerations. First, work-authorisation verification: the employer must confirm the candidate’s residence permit and work permit (where applicable) and retain copies for the file. Second, cross-border data processing: international background-check providers must align their data-flows with both Law 2297-VI and the data-protection regime in the candidate’s home country.
Where a foreign-national candidate is asked to provide a criminal-history record from their home country, the foreign record must be apostilled (or otherwise authenticated under the relevant treaty) and translated into Ukrainian by a sworn translator before it can be relied on under Ukrainian law. Asanify Employer of Record Ukraine coordinates the apostille and translation as part of the candidate’s onboarding pack.
Data Retention, Candidate Rights, and Withdrawal of Consent
Background-check data must be retained only for the period necessary to satisfy the original processing purpose. For successful hires, the data is generally retained for the duration of employment plus the period required by labour, tax, and statute-of-limitations rules (typically 3 to 5 years post-termination). For unsuccessful candidates, retention beyond a short defensibility window (typically 6 months) requires a fresh lawful basis.
Candidates retain the standard data-subject rights under Law 2297-VI: access (request a copy of the data held), rectification (correct inaccurate data), erasure (where the lawful basis no longer applies), and withdrawal of consent (with prospective effect). Asanify’s onboarding workflow surfaces the candidate’s data-subject rights at the consent stage and provides a documented channel for any subsequent rights request.
Common Mistakes Foreign Employers Make on Ukrainian Background Checks
Three common mistakes recur with foreign employers running their first Ukraine background check. First, applying a US-style criminal-history check by default, without recognising that Law 2297-VI restricts this to roles where the check is statutorily mandated or where the candidate has provided express written consent and the employer has a clear lawful basis.
Second, using an international background-check provider that does not align its data-flows with Law 2297-VI, creating cross-border data-transfer exposures. Third, retaining unsuccessful-candidate data indefinitely “in case we want to revisit”, which violates the storage-limitation principle. Asanify Employer of Record Ukraine builds the consent capture, lawful-basis documentation, and retention controls into every Ukrainian hire so the foreign client never accidentally trips one of these wires.
How Asanify Runs Compliant Ukraine Background Checks
Asanify Employer of Record Ukraine runs a standardised background-check workflow on every hire, scaled to the specific role and lawful-basis profile. The workflow includes identity verification, employment-history check (with consent), education-credential verification, and reference checks (with consent). Where the role is statutorily mandated or the client has a clear lawful basis, criminal-history checks are added with separate express written consent.
Five-Day Onboarding Includes the Background Check
Asanify Employer of Record Ukraine runs a standardised background-check workflow on every hire, scaled to the specific role and lawful-basis profile. The workflow includes identity verification, employment-history check (with consent), education-credential verification, and reference checks (with consent). Where the role is statutorily mandated or the client has a clear lawful basis, criminal-history checks are added with separate express written consent.
Diia City Regulatory Context for IT Sector Hires
The Diia City special regime for IT employers (Law 1667-IX) does not change the underlying background-check rules. Personal Data Protection Law 2297-VI continues to apply, criminal-history checks still require express written consent, and reference checks remain the dominant practice. Diia City does, however, change the contract type and tax treatment of the IT specialist, which can affect retention rules and the data fields collected on onboarding. Asanify Employer of Record Ukraine operates under the standard Ukrainian payroll regime and does not handle Diia City registration. companies whose Ukrainian specialists are already in Diia City should discuss the implications with their tax adviser.
GDPR Equivalence and Cross-Border Data Transfers
Ukraine’s Personal Data Protection Law tracks GDPR principles but Ukraine has not (as of May 2026) been granted EU adequacy status. Cross-border transfers of background-check data from Ukraine to a foreign employer’s home country must therefore be supported by an appropriate transfer mechanism (typically standard contractual clauses or candidate consent). Asanify Employer of Record Ukraine handles the data residency and cross-border-transfer documentation as part of the onboarding pack so the global HR team has a clean compliance record.
Frequently Asked Questions: Background Checks in Ukraine
Are background checks mandatory in Ukraine?
Background checks are mandatory by statute only for specific roles (teachers, civil servants, judges, certain financial-sector roles, work with children). For general commercial hires, background checks are voluntary and require the candidate’s consent under Personal Data Protection Law No. 2297-VI. Reference checks are the dominant market practice for IT and corporate roles.
Can I run a criminal-history check on a Ukrainian candidate?
Only with the candidate’s express written consent and (in most cases) a clear lawful basis specific to the role. Criminal-history data is sensitive personal data under Law 2297-VI Article 7, and processing requires both lawful basis and explicit written consent. For general commercial roles, criminal checks are uncommon and most Ukrainian candidates will resist them.
How long does a Ukrainian background check take?
Reference checks and identity verification typically complete within 2 to 5 business days. Education-credential verification through EDEBO (Ukraine’s Unified State Electronic Database on Education) typically completes within 5 to 10 business days. Criminal-history records from the National Police of Ukraine typically take 10 to 20 business days. Asanify runs the standard checks in parallel with contract drafting so the 5-day onboarding remains intact for typical roles.
Who pays for the background check?
The employer pays. Asanify Employer of Record Ukraine includes the standard background-check workflow (identity, employment history, education, references) in the country-priced EOR fee from $399 per employee per month. Optional add-ons (criminal-history checks, credit checks, foreign-jurisdiction checks for foreign-resident candidates) are billed at cost.
What happens if a candidate refuses a background check?
For voluntary checks, the candidate is within their rights to refuse, and the employer must decide whether to proceed without the check or withdraw the offer. For statutorily mandated checks (teachers, civil servants, judges, certain financial-sector roles), refusal disqualifies the candidate. Asanify documents the candidate’s consent or refusal at the offer stage so the decision trail is clean.
Can I use an international background-check provider for Ukrainian hires?
Yes, but the provider must align its data flows with Personal Data Protection Law No. 2297-VI, including any cross-border-transfer documentation (standard contractual clauses or candidate consent for the transfer). Asanify Employer of Record Ukraine handles the data residency and cross-border-transfer paperwork so the global HR team has a clean compliance record.
How long can I retain Ukraine background check data?
Retain only for the period necessary to satisfy the original processing purpose. For successful hires, typically the duration of employment plus 3 to 5 years post-termination (aligned with labour, tax, and statute-of-limitations rules). For unsuccessful candidates, typically a 6-month defensibility window. Indefinite retention violates the storage-limitation principle of Law 2297-VI.
Do Ukrainian candidates have the right to see their background-check data?
Yes. Under Law 2297-VI, candidates retain the standard data-subject rights: access (request a copy of the data held), rectification (correct inaccurate data), erasure (where the lawful basis no longer applies), and withdrawal of consent (with prospective effect). Asanify provides a documented channel for any data-subject rights request and responds within the statutory timeframe.