Is it possible to somehow store data on foreign servers without violating the law on personal data (fz-152)?

Question

Law in IT

The site is written using firebase, so the database with user data is stored on the google cloud. As I understand it, the google cloud servers are not located on the territory of the Russian Federation, so the logical question arises how not to violate this law, but not to abandon the firebase.
Will the solution be to store the data in encrypted form?

Answer 1

The law does not prohibit the storage of PD on foreign servers, it requires that they be stored in the Russian Federation. In the case of relational DBMS, this was solved by installing a cheap server in the Russian Federation and setting up replication on it. You can think of something like this for firebase.

Answer 2

Rent a server in the Russian Federation
Deploy Firebase there
Use)
Or rent a ready-made service from firebase in the Russian Federation

Answer 3

The law does not require storing only in the Russian Federation. You can store an up-to-date, accurate and half-full copy of the database in the Russian Federation, and keep the original anywhere. True, at the present time, I would be afraid to keep the data from Google - they will ban me and not say anything.

Answer 4

The letter of the law speaks of confidentiality and cross-border data transfer, the use of google cloud 'on the forehead' without data encryption on the Russian side will be contrary to the spirit and letter of the law.
By also creating such laws, the Russian state seeks to gain at least some kind of independence from others (for example, data can become / will definitely become hostages) and have full access to this data (for example, deleting or changing data at the request of the authorities, you yourself understand why), this law does not say this to itself, but ...
ps unfortunately it is impossible to fulfill the whole complex of laws without "selling your soul", so think for yourself