Will there be liability for sharing personal data?

I recently learned that the personal data of 20 million Ukrainian citizens was leaked online. Does Ukrainian law provide for liability for such disclosure?