On May 28, 2026, Ukraine's Verkhovna Rada failed to pass Bill No. 12191, the long-pending reform of Article 301 of the Criminal Code. The draft drew 207 votes — 19 short of the 226 needed — and was rejected. The defeat is being reported, accurately, as a setback for adult-content creators. But the more consequential casualty is the part of the bill almost no one was arguing about: a proposed new Article 301-3 that would, for the first time, have created a tailored criminal offense for non-consensual intimate imagery, explicitly including deepfakes and AI-generated sexual content.
The result is the worst of both worlds. Ukraine keeps a sweeping morality statute that jails consenting adults, and it still lacks a modern, victim-centered law against the synthetic image abuse that is the actual emerging harm.
What Article 301 still does
Article 301 of Ukraine's Criminal Code criminalizes the import, production, sale, and distribution of pornographic material as such. The statutory scheme is severe: the chapter carries prison terms reaching seven to ten years in aggravated cases. Crucially, the offense turns on the nature of the content, not on whether anyone was harmed, coerced, or even non-consenting. Sending a partner a nude photo, or earning income on a platform like OnlyFans, can fall within its terms.
This is not a dormant provision. According to data registry Opendatabot, Ukraine opened 2,368 pornography-related criminal proceedings in the first half of 2025 — a 20% rise year on year. About 1,411 of those — roughly 60% — were opened under Article 301 for adult content, and 80% were sent to court. The monthly rate of new adult-content cases has climbed from around 75 in 2023 to roughly 235 in 2025. Bill sponsor Yaroslav Zheleznyak put the human stakes bluntly: without reform, people "will continue to be thrown in prison for 7 years for adults sending each other their nude photos."
What the bill would have changed
Bill 12191 was not a deregulatory free-for-all. It refocused Article 301 on genuine harms — coercion, exploitation of a vulnerable state, and above all offenses against minors, where it preserved penalties up to 12 years. It then added Article 301-3, creating liability for the non-consensual distribution of intimate material and, notably, "the creation of sexual content without a person's consent, including deepfake and content created by artificial intelligence." Penalties escalated for repeat or profit-driven conduct and for content involving minors.
That is the architecture proportionate regulation calls for: decriminalize the consensual conduct that harms no one, and concentrate the criminal law's force on conduct defined by the absence of consent. The bill moved the legal trigger from "is this pornographic?" to "did someone consent?" — which is the only question that should matter.
The case for the existing law, and why it falls short
The strongest argument for keeping Article 301 broad is enforcement practicality. A content-based ban gives police and prosecutors a clean, easily proven offense; requiring proof of non-consent in every case raises the evidentiary bar and could let some traffickers and abusers escape on technicalities. Defenders also worry that decriminalization signals moral permissiveness during wartime, when the state is asking citizens for sacrifice. These are serious concerns, and Ukraine's child-protection record — 957 child-related cases in the same period — shows the harms are real.
But a law that sweeps in consenting adults to make prosecution easier has inverted the purpose of criminal law. It manufactures hundreds of victimless cases a month, consuming investigative and judicial capacity a country at war can ill afford, while the genuinely dangerous conduct — coercion, child abuse, and now synthetic image abuse — is buried in the same undifferentiated pile. Easier prosecution of the innocent is not a feature.
The deepfake gap is the real story
Deepfake sexual abuse is precisely the harm a modern criminal code should name explicitly. The technology lets anyone fabricate convincing intimate images of a real person without ever touching them, collapsing the old evidentiary link between a depiction and a filmed act. Ukrainian lawyers backing the bill noted that AI-generated sexual imagery without consent is "a pressing problem that almost no one has yet legally addressed." The European Union reached the same conclusion: its 2024 Directive on combating violence against women requires member states to criminalize the non-consensual production and sharing of intimate and deepfake material — a template a would-be EU member like Ukraine will eventually have to match.
By voting down Bill 12191 as a package, the Rada did not preserve a tough stance on deepfakes. It preserved a statute that never mentioned them, and discarded the one provision that would have. Victims of synthetic abuse must still shoehorn their complaints into laws written for analog pornography — or go unprotected.
A reform worth salvaging
The vote was close, and the disagreement was largely about decriminalizing adult content, not about punishing deepfake abuse. That suggests an obvious path: split the bill. Article 301-3's non-consensual-imagery offense commands broad support and addresses an undisputed harm; it should be reintroduced on its own and passed quickly. The decriminalization debate can continue separately on its merits.
Ukraine has built impressive digital-governance institutions and aspires to EU accession. Its criminal code should reflect the same modern, rights-respecting instinct: punish the violation of consent, not the existence of a category of content. Bill 12191's defeat was a missed chance to do both at once. The least the Rada can do is rescue the half everyone agrees on.