Personal data law and clouds?

Question

Personal Information

Good afternoon! On one side there is an international group of companies, and a company in Russia that is part of this group. The group has a chic cloud solution for managing IT services - ServiceNow. On the other side 152FZ + 242FZ. ServiceNow stores users (name, position, phone, e-mail). What are the options for using the above solution without violating the law?

Answer 1

Well, this is not a forum of lawyers.

Answer 2

There are three options:
1) no way
2) store here and stir up with cross-border transmission.
3) prove that this is not personal data.
The law is murky and involves a lot of paper work, while no matter how you get up, the murky wordings and internal instructions for various departments in any case allow you to be taken by the ass.
It is better to hire people who specialize in this, although this is not cheap.

Answer 3

to do replication of a DB on vds in the Russian Federation. say that all the data in the Russian Federation. Like it or not, it is unlikely that anyone will check before any incident.

Answer 4

Well, for sure, all this should be local (intracorporate network) and there will be non-disclosure under the company's contract.