Storage of personal data, how what and why?

Question

Personal Information

An application similar to a social network is planned.
Information to be stored
Full name
Date of birth
Health insurance
Phone
Automatically we fall under the law and the protection of personal data.
Is it legal to bypass it? For example, write in the user agreement that this data will be publicly available.
And what if we keep the passport (photo for example)? What should we read about this, where to read the information?
As I understand it, we will need to pass some kind of certification? How is it all arranged in general? Explain what to do and how we should be, not in the know at all.
And do we need to somehow protect data such as full name in the application?

Answer 1

Certification is not required.
At first, some potential users will pay attention to this.
Then they will bring it to the attention of others.
And your network will be bent.
How to prepare for the RKN verification based on personal data

Answer 2

Okay, you got around the law. The user agreed to store the passport photo with you. Now let's say that someone (not you) steals the user's passport data, and hangs up a bunch of loans. The user goes to the police, writes a statement and indicates, among other things, that he left his passport on your site. After that, you will have a very close and not very pleasant communication with law enforcement agencies. Think about it - is it worth it?

Answer 3

I find it strange what others write.
The user agrees - this is required. No options.
But even if the user agrees, this does not cancel other postulates.