How to organize the storage of personal data of users from Russia and the EU?

A

Artyom2020-09-02 19:28:53

Personal Information

Artyom, 2020-09-02 19:28:53

It is necessary to make an application that stores and processes personal data of users from Russia and EU countries.
It is important that users can see each other in the application, exchange information (for example, chat).

By law, the data of users of the Russian Federation must be stored on the territory of Russia, and the EU on the territory of the EU. Therefore, AWS cannot be used as a single cloud.

There is an idea to organize separate storages for personal data, and store UUIDs of users in the main database.
In this case, the complexity of supporting the infrastructure greatly increases - several clouds instead of one, deployment, organization of fault tolerance, etc.

Perhaps someone has already encountered a similar problem.
I would be happy to hear suggestions and advice on this issue.

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

I

Ivan Shumov, 2020-09-02
@inoise

There is no problem really. There is storage and there is transmission. You need to understand that "user" != "personal data"
It's just worth making a pointer where the user's personal data is stored and pulling it from there if necessary. It will not affect the main infrastructure in any way.
That is, yes - users separately, personal data separately.

S

Sergey Gornostaev, 2020-09-02
@sergey-gornostaev

By law, the data of users of the Russian Federation must be stored on the territory of Russia

It is enough to buy a cheap VPS from a Russian hosting provider, install a DBMS on it and set up replication on it. The condition for storing user data on the territory of the Russian Federation will be fulfilled.

A

Adamos, 2020-09-02
@Adamos

Often the requirement to store personal data at the place of citizenship is misunderstood.
There is no requirement to store data only in the Russian Federation or the EU.
There is a requirement to store this data in the Russian Federation or the EU too . To make it easier for local legal structures to lay a paw on them (the meaning of the requirements is only and exclusively in this). If your server is abroad, they may have difficulties, and these difficulties are passed on to you.