How and where to store user data in accordance with the law "On Personal Data"?

Question

Database

There is a question, the discussion of which I did not find here, and it is becoming more and more relevant.
Many people keep their sites on foreign hosting/VPS/VDS for obvious reasons. However, since September of this year, all personal user data must somehow be placed on the territory of the Russian Federation.

How to implement it technically for foreign hosting?
Transfer entirely to domestic servers (I have not seen such, but perhaps one of the foreign hosters has data centers in Russia)?
Switch to a Russian host?
Somehow transfer part of the data to Russia (if so, how can this be done)?

I really want to hear good advice, since the question is relevant for many

Answer 1

The text of this law says something like this: "Personal data of citizens of the Russian Federation must be stored on servers located within the Russian Federation." Do you see somewhere that this data should be stored exclusively in the Russian Federation? Personally, I did not find such an item there.
Personally, for myself, I came up with the following solution: I’m not going to transfer anything from Germany where I have everything set up and works fine, but in order not to fly into a fine from Roskomnadzor, I take a VPS in the Russian Federation, install a DBMS there and set up replication. All! Formally, I fulfilled the requirements of the law, the regulator has nothing to complain about.
If you follow my path - conclude an agreement with a Russian hoster and pay him through the bank to the account, we keep receipts for 3 years. So in court it will be easier for you to prove that you are not a "deer",

Answer 2

I would wait for the adoption of the law and in fact have already decided what to do.
We often adopt laws that seem not what they really are.

Answer 3

Just keep in mind that, in addition to this restriction on the location of servers, there have long been other articles in the legislation that perfectly allow you to attract site owners for violating the rules for processing and storing personal data. Actually, for a long time there have been legal consultations that ensure that sites are brought into line with the laws .... But, if you feel sorry for 5,000 rubles for the services of professionals, then you can, of course, get confused yourself, study judicial practice and draw conclusions.

Answer 4

By the way, Google and Master Card have already moved to Russia