How to work with passport data in the application?

Question

Android

In the application, when registering, you must send a passport photo to the server (courier, for responsibility for the delivery of the order). What precautions should be encoded in the application, so that later you do not lash out under the law on personal data? Using only https connection? What to write in the user agreement? Is it worth it to deal with a passport through the application at all, or is it better to register a person in the office and give him a login and password for the application?

Answer 1

What photos?! What are you about!
Only the contract and a photocopy in the office!

Answer 2

I categorically do not advise you to store scans of passports on the server, if it is possible to get away from this by organizational measures.
If you are interested in the list of technical requirements that must be met, then read FSTEC Order No. 21 (especially the plate at the very end). The required level of security you most likely have the smallest, because. couriers no more than 100,000 people (it is necessary to determine the level on the basis of Decree of the Government of the Russian Federation No. 1119), but even with him there are a lot of events.