Processing of personal data that the user wants to be freely available?

Question

Personal Information

Hello. Not quite clear. For example, the site on which the user registers indicates the name, email and other personal information (date of birth, city (without address), some text about yourself). Server outside of Russia. This data can be seen by another user (and not an authorized user). Also simple chat and messages are stored in the database). The user decides to show this information or not.

Do I need to encrypt messages between users? Or can it be saved as text?

Is it necessary in this case to notify Roskomnadzor or whatever about this site and what personal data it uses? Will a page with a description and a checkmark "I agree to the processing of personal data" be enough?

Answer 1

1. If the user himself posted information about himself in a public source, then this is public data that is not related to personal data (in terms of legal wording).
2. Personal data of citizens of the Russian Federation, according to the regulations, including those of Roskomnadzor, must be processed only on the territory of the Russian Federation.
3. Data encryption is a licensed activity.