Social and Legal Studios
ISSN 2617-4162
e-ISSN 2617-4170
Publisher: Lviv State University of Internal Affairs
Abstract
The aim of this study was to develop a legislative definition of bot farms, thereby creating a basis for legal regulation of their use. The research employed the formal-legal and comparative-legal methods. The issue of bot farms is an emerging area of interest, prompted by increasing trends in the use of bots for purposes such as propaganda, fraud, and disinformation. Bots can be categorised into the following groups: one-day bots, classic bots, foreign bots, non- standard bots, and bots with complex behaviour. Furthermore, the study identified the purposes and areas of activity of bot farms, which include generating artificial traffic for financial gain, and conducting propaganda, disinformation, and the promotion of narratives and specific viewpoints within society. The study also examined the legislative regulation of the creation and operation of bot farms. A comparative analysis was conducted of the legal norms in European Union countries and the United States of America concerning the spread of artificial intelligence and the use of bots. The legal framework addressing liability for the use of bot farms for criminal purposes was reviewed. Relevant legislative proposals were analysed, the adoption of which could influence prosecution for disinformation and the deployment of criminal bots under martial law. Specific cases involving the exposure of bot farms were considered, along with the distinctive legal mechanisms used to counteract the activities of illegal bot farms, based on the experiences of foreign jurisdictions. The practical value of the study lies in the fact that it showed that Ukrainian legislation is not adapted to regulate the development of bot technologies, especially AI-based bots, and therefore needs to be revised by the legislator to combat the growing risks of disinformation and manipulation
Keywords: cybersecurity; artificial intelligence; criminal liability; social networks; fake information; propaganda
Suggested citation
[1] Ahmad, A., Waseem, M., Liang, P., Fahmideh, M., Aktar, M.S., & Mikkonen, T. (2023). Towards human-bot collaborative software architecting with ChatGPT. In Proceedings of the 27th international conference on evaluation and assessment in software engineering (pp. 279-285). New York: Association for Computing Machinery. doi: 10.1145/3593434.3593468.
[2] Aïmeur, E., Amri, S., & Brassard, G. (2023). Fake news, disinformation and misinformation in social media: A review. Social Network Analysis and Mining, 13(1), article number 30. doi: 10.1007/s13278-023-01028-5.
[3] Bill of the Senate of the California No. 1001 “Bots: Disclosure”. (2018, September). Retrieved from https://calmatters. digitaldemocracy.org/bills/ca_201720180sb1001.
[4] Böck, L., Fejrskov, M., Demetzou, K., Karuppayah, S., Mühlhäuser, M., & Vasilomanolakis, E. (2022). Processing of botnet tracking data under the GDPR. Computer Law & Security Review, 45, article number 105652. doi: 10.1016/j.clsr.2021.105652.
[5] Cantekin, K. (2020). Turkey: Parliament passes law imposing new obligations on social media companies. Retrieved from https:// www.loc.gov/item/global-legal-monitor/2020-08-06/turkey-parliament-passes-law-imposing-new-obligations-on-social- media-companies/.
[6] Civil Code of Ukraine. (2003, January). Retrieved from https://zakon.rada.gov.ua/go/435-15.
[7] Code of Practice on Disinformation by the European Commission. (2018, April). Retrieved from https://ec.europa.eu/newsroom/dae/redirection/document/87534.
[8] Code of Practice on Disinformation. (2022, June). Retrieved from https://digital-strategy.ec.europa.eu/en/policies/code-practice-disinformation.
[9] Code of Ukraine on Administrative Offenses. (1996, October). Retrieved from https://zakon.rada.gov.ua/go/80731-10.
[10] Constitution of Ukraine. (1996, June). Retrieved from https://zakon.rada.gov.ua/laws/show/en/254%D0%BA/96-%D0%B2%D1%80#Text.
[11] Criminal Code of Ukraine. (2001, April). Retrieved from https://zakon.rada.gov.ua/laws/show/en/2341-14.
[12] Cyber Police of Ukraine. (2023). Over 4,000 bots to discredit the Ukrainian Defense Forces and spread propaganda in favour of Russia: Vinnytsia Region police liquidated a large-scale bot farm. Retrieved from https://cyberpolice.gov.ua/news/ponad-- botiv-dlya-dyskredytacziyi-syl-oborony-ukrayiny-ta-poshyrennya-propagandy-na-koryst-rosiyi-policzejski-vinnychchyny- likviduvaly-masshtabnu-botofermu-7868/.
[13] Decree of the President of Ukraine No. 685/2021 “On the Decision of the National Security and Defense Council of Ukraine “On the Information Security Strategy”. (2021, December). Retrieved from https://zakon.rada.gov.ua/laws/show/685/2021#n5.
[14] Directive of the European Parliament and of the Council No. 2018/1808 “On the Amending Directive No. 2010/13/EU “On the Coordination of Certain Provisions Laid Down by Law, Regulation or Administrative Action in Member States Concerning the Provision of Audiovisual Media Services (Audiovisual Media Services Directive) in View of Changing Market Realities”. (2018, November). Retrieved from http://data.europa.eu/eli/dir/2018/1808/oj.
[15] Draft Law of Ukraine No. 11115 “On Amendments to Certain Laws of Ukraine on Regulation of the Activities of Information Sharing Platforms Through Which Mass Information is Distributed”. (2024, March). Retrieved from https://itd.rada.gov.ua/ billinfo/Bills/Card/43884.
[16] Draft Law of Ukraine No. 9223 “On Amendments to the Criminal and Criminal Procedure Codes of Ukraine Regarding the Establishment of Liability for Certain Actions Against the Foundations of National Security of Ukraine”. (2023, April). Retrieved from https://itd.rada.gov.ua/billInfo/Bills/Card/41788.
[17] Dzyana, H., & Dzyanyy, R. (2023). Public administrative activity in the conditions of contemporary uncertainty: Information and communication aspect. Democratic Governance, 16(1), 37-51. doi: 10.23939/dg2023.01.037.
[18] Explanatory Note to the Draft Law of Ukraine No. 11115 “On Amendments to Certain Laws of Ukraine on Regulation of the Activities of Information Sharing Platforms Through Which Mass Information is Distributed”. (2024). Retrieved from https:// itd.rada.gov.ua/billInfo/Bills/pubFile/2274626.
[19] Fadhil, H.M., Makhool, N.Q., Hummady, M.M., & Dawood, Z.O. (2022). Machine learning-based information security model for botnet detection. Journal of Cybersecurity and Information Management, 9(1), 68-79. doi: 10.54216/JCIM.
[20] Gallwitz, F., & Kreil, M. (2022). Investigating the validity of botometer-based social bot studies. In F. Spezzano, A. Amaral, D. Ceolin, L. Fazio & E. Serra (Eds.), Proceedings of the 4th multidisciplinary international symposium “Disinformation in open online media” (pp. 63-78). Cham: Springer. doi: 10.1007/978-3-031-18253-2_5.
[21] Gesmann-Nuissl, D., & Meyer, S. (2022). Siri 2.0 – conversational commerce of social bots and the new law of obligations of data: Explorations for the benefit of consumer protection. Robotics, 11(6), article number 125. doi: 10.3390/robotics11060125.
[22] Gidey, H.K., Hillmann, P., Karcher, A., & Knoll, A. (2023). Towards cognitive bots: Architectural research challenges. In P. Hammer, M. Alirezaie & C. Strannegård (Eds.), Proceedings of the 16th international conference “Artificial general intelligence” (pp. 105-114). Cham: Springer. doi: 10.1007/978-3-031-33469-6_11.
[23] Gulati, J., & Gulati, G.C. (2024). Analysing the algorithm of zoombombing as a cybercrime in digital era: Legal risks and challenges. Journal of Electrical Systems, 20(4), 2445-2452. doi: 10.52783/jes.2751.
[24] Harbinja, E., Edwards, L., & McVey, M. (2023). Governing ghostbots. Computer Law & Security Review, 48, article number 105791. doi: 10.1016/j.clsr.2023.105791.
[25] He, Q., Wang, L., Cui, L., Yang, L., & Luo, B. (2022). Gravity-law based critical bots identification in large-scale heterogeneous bot infection network. Electronics, 11(11), 1771. doi: 10.3390/electronics11111771.
[26] Hodgins, J.M. (2022). Countering Russian subversion during federal elections in Canada in the era of social media and fake news. ITSS Verona Magazine, 1(1).
[27] Hutson, J., Banerjee, G., Kshetri, N., Odenwald, K., & Ratican, J. (2023). Architecting the metaverse: Blockchain and the financial and legal regulatory challenges of virtual real estate. Journal of Intelligent Learning Systems and Applications, 15(1), 1-23. doi: 10.4236/jilsa.2023.151001.
[28] Ivan, D.L., & Manea, T. (2022). AI use in criminal matters as permitted under EU law and as needed to safeguard the essence of fundamental rights. International Journal of Law in Changing World, 1(1), 17-32. doi: 10.54934/ijlcw.v1i1.15.
[29] Kharchenko, V., Ponochovnyi, Y., Qahtan, A.-S.M., & Boyarchuk, A. (2017). Security and availability models for smart building automation systems. International Journal of Computing, 16(4), 194-202. doi: 10.47839/ijc.16.4.907.
[30] Kostenko, O., Jaynes, T., Zhuravlov, D., Dniprov, O., & Usenko, Y. (2022). Problems of using autonomous military AI against the background of Russiaʼs military aggression against Ukraine. Baltic Journal of Legal and Social Sciences, 4, 131-145. doi: 10.30525/2592-8813-2022-4-16.
[31] Kovac, M. (2022). Autonomous artificial intelligence and uncontemplated hazards: Towards the optimal regulatory framework. European Journal of Risk Regulation, 13(1), 94-113. doi: 10.1017/err.2021.28.
[32] Kovalchuk, D. (2025). Utilising large language models for automated real-time cyber threat analysis. Bulletin of Cherkasy State Technological University, 30(1), 48-58. doi: 10.62660/bcstu/1.2025.48.
[33] Kravchuk, M., Kravchuk, V., Hrubinko, A., Podkovenko, T., & Ukhach, V. (2024). Cyber security in Ukraine: Theoretical view and legal regulation. Law, Policy and Security, 2(2), 28-38. doi: 10.62566/lps/2.2024.28.
[34] Law of the Turkey No. 5651 “On Regulation of Broadcasts via Internet and Combating Crimes Committed by the Means of Such Publications”. (2007, May). Retrieved from https://mbkaya.com/turkish-internet-law/.
[35] Law of Ukraine No. 2657-XII “On Information”. (1992, October). Retrieved from https://zakon.rada.gov.ua/laws/show/ en/2657-12#Text.
[36] Law of Ukraine No. 2849-IX “On Media”. (2022, December). Retrieved from https://zakon.rada.gov.ua/go/2849-20.
[37] Makhortykh, M., Urman, A., Münch, F.V., Heldt, A., Dreyer, S., & Kettemann, M.C. (2022). Not all who are bots are evil: A cross- platform analysis of automated agent governance. New Media & Society, 24(4), 964-981. doi: 10.1177/14614448221079035.
[38] Mbona, I., & Eloff, J.H.P. (2022). Feature selection using Benford’s law to support detection of malicious social media bots. Information Sciences, 582, 369-381. doi: 10.1016/j.ins.2021.09.038.
[39] Mbona, I., & Eloff, J.H.P. (2023). Classifying social media bots as malicious or benign using semi-supervised machine learning. Journal of Cybersecurity, 9(1), article number tyac015. doi: 10.1093/cybsec/tyac015.
[40] Mezei, K., & Szentgáli-Tóth, B. (2023). Some comments on the legal regulation on misinformation and cyber attacks conducted through online platforms. Lexonomica, 15(1), 33-52. doi: 10.18690/lexonomica.15.1.33-52.2023.
[41] Odilla, F. (2023). Bots against corruption: Exploring the benefits and limitations of AI-based anti-corruption technology. Crime, Law and Social Change, 80(4), 353-396. doi: 10.1007/s10611-023-10091-0.
[42] Pagallo, U., Bassi, E., & Durante, M. (2023). The normative challenges of AI in outer space: Law, ethics, and the realignment of terrestrial standards. Philosophy & Technology, 36, article number 23. doi: 10.1007/s13347-023-00626-7.
[43] Public Law of the United States of America No. 114-274 “BOTS Act 2016”. (2016, September). Retrieved from https://www. congress.gov/bill/114th-congress/senate-bill/3183.
[44] Rataj, P. (2025). Botnet defense under EU data protection law. Computer Law & Security Review, 56, article number 106080. doi: 10.1016/j.clsr.2024.106080.
[45] Rawat, R., Oki, O., Chakrawarti, R.K., Adekunle, T.S., Lukose, J.M., & Ajagbe, S.A. (2023). Autonomous artificial intelligence systems for fraud detection and forensics in dark web environments. Informatica, 47(9), 51-62. doi: 10.31449/inf.v46i9.4538.
[46] Regulation of the European Parliament and of the Council No. 2016/679 “On the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC (General Data Protection Regulation)”. (2016, April). Retrieved from http://data.europa.eu/eli/reg/2016/679/oj.
[47] Regulation of the European Parliament and of the Council No. 2022/2065 “On a Single Market for Digital Services and Amending Directive 2000/31/EC (Digital Services Act)”. (2022, October). Retrieved from http://data.europa.eu/eli/reg/2022/2065/oj.
[48] Shadmy, T. (2022). Content traffic regulation: A democratic framework for addressing misinformation. Jurimetrics Journal, 63.
[49] Shynkar, T., & Levchenko, T. (2023). Manipulative technologies in terms of information security. Society. Document. Communication, 8(2), 270-286. doi: 10.31470/2518-7600-2023-19-270-286.
[50] Tkachenko, O., Chechet, A., Chernykh, M., Bunas, S., & Jatkiewicz, P. (2025). Scalable front-end architecture: Building for growth and sustainability. Informatica (3lovenia), 49(1), 137-150. doi: 10.31449/inf.v49i1.6304.
[51] Yaroshenko, O.M., Melnychuk, N.O., Zhygalkin, I.P., Silchenko, S.O., & Zaika, D.I. (2022). Problems of legal regulation of artificial intelligence in labour law of developed countries. Informatologia, 55(1-2), 160-169. doi: 10.32914/i.55.1-2.13.
[52] Ye, X., Yan, Y., Li, J., & Jiang, B. (2024). Privacy and personal data risk governance for generative artificial intelligence: A Chinese perspective. Telecommunications Policy, 48(10), article number 102851. doi: 10.1016/j.telpol.2024.102851.
[53] Zelenov, D. (2024). Psychological mechanisms of influence of disinformation and fake news on the formation of public opinion on Ukrainian European integration: Analysis of Russian propaganda. 3cientific 3tudios on 3ocial and Political Psychology, 30(2), 25-35. doi: 10.61727/sssppj/2.2024.25.
[54] Zoltick, M.M., & Maisel, J.B. (2023). Societal impacts: Legal, regulatory and ethical considerations for the digital twin. In N. Crespi, A.T. Drobot & R. Minerva (Eds.), The digital twin (pp. 1167-1200). Cham: Springer. doi: 10.1007/978-3-031-21343- 4_37.