4 ms·
> The interesting thing is, that the law seems not to forbid to store the data outside of Russia, it "just" dictates that the data has to be stored in Russia al
by togus 10y ago
> The interesting thing is, that the law seems not to forbid to store the data outside of Russia, it "just" dictates that the data has to be stored in Russia also.
Correct! I was on a team trying to architect a solution for this and the requirements was really diffuse. We ended up doing a DB "replication" (via triggers) to a Russian cloud provider after the data had been committed in a european data center. The lawyers signed off on it but there were no clear guidelines from the Ministry of Communication (http://minsvyaz.ru/ http://minsvyaz.ru/) on what was OK from an tech implementation view.
However, I feel that the best solution for solving it was to have all Russian traffic routed through something like a reverse web proxy which would first write the data to servers located in Russia or fail the request.
- ivan_gammel 10y agoSince you may not reliably determine the citizenship via traffic routes, probably, it's better to ask user during signup about his country (simple pre-filled "Where are you from?" question, true answer on which is required by ToS) and then route his data through a native (Russian, Chinese etc) server, which can store it and "request" further processing overseas (this fulfills all the requirements of the law, including both storage and primary processing).
- deleted 10y ago[deleted]