Need to see if your shared folder is taking up space on your dropbox 👨💻? Find out how to check here.
Forum Discussion
Solved
GDPR Compliance for Personal / Free Accounts
Hi, I work with various charities in the UK who often use free Dropbox accounts to share files for boards of trustees, teams etc. There is some confusion as to whether the GDPR compliance steps ...
- Hi Tom
As somebody in the UK the biggest thing you need to make sure is that the end users whos data is being stored is aware of it being stored AND that it is stored outside of the EU. Same goes if they email things in they need to know where those email servers are (e.g. Office365 = USA etc.).
Ed wrote:
Hi All
To add to that:
Our Dropbox Terms of Service and Privacy Policy govern Dropbox Basic, Professional and Plus products while our DPA is only applicable for Dropbox’s Business users. Additionally, Dropbox is bound by the language of the Privacy Policy with respect to Dropbox Business customers and the users on a Dropbox Business team.
While Data Processing Amendments are only for Dropbox Business customers, Dropbox will meet the requirements of the GDPR by May 25, 2018 as required across all its services, including Dropbox Basic, Plus, Pro, and Business.
So, what I take from this is that business users can have a DPA - which allows them to use Dropbox to store personal data they are controllers for. If you have a basic account - Dropbox will be GDPR compliant in terms of what they have to do to store our details i.e. Dropbox customers data who are from the EU (not personal data that their customers are controllers of).
They are complient as far as individual users are concerned, but not if you use their service for work related items. So Dropbox can not be used by contractors/people who are self employed or small businesses who do not require 3 user accounts.
Dropbox is using server capacity in Germany for business customers.
"Dropbox versucht dem Misstrauen gegenüber den Serverstandort in den USA entgegenzuwirken, indem es Unternehmenskunden beziehungsweise professionellen Nutzern anbietet, deren Daten auf Servern in Deutschland zu speichern (dieses Angebot gibt es allerdings nicht für Privatnutzer). Dropbox nutzt hierfür die Ressourcen der Amazon Web Services im Frankfurter Rechenzentrum." (www.pcwelt.de)
What I am wondering is, if there is GDPR compliance economy and business class at Dropbox. And why Mailchimp is able to provide the necessary DPA.
I was hoping, that Dropbox would find a solution, and not leave its (paying) customers in the cold. My 12-month-plan just extended automatically, and there is obviously no chance to get money refundet, when I cancel the plan now.
After all is Dropbox not the only company offering cloud services (let alone that others do comply to GDPR AND provide DPAs).
