What are the requirements for the storage and processing of passport data? Possible legal problems?

Question

Database

We plan to create accounts on the site linked to real people. The most logical option is linking to a passport, but this raises the question - do we have the right and what can we do with this data, are we obliged to protect information.

Answer 1

First of all, you need to build on the Federal Law-152 "On Personal Data".
If the state information system - to implement the measures from the Order of the FSTEC No. 17. If non-state - from FSTEC Order No. 21. The level of protection depends on how many subjects you will process information and what categories you will collect (if only passport data, then it’s good).
In addition, it is necessary to study and implement all the requirements from the FSTEC, the FSB and Roskomnadzor, and then send the latter a notification about the processing of personal data.

Answer 2

When registering on the site, the user accepts the "agreement", the Clause on the processing of personal data must be there. And all the cases ""by clicking "accept" you accept the conditions ..."