Need to see if your shared folder is taking up space on your dropbox 👨💻? Find out how to check here.
Forum Discussion
Solved
GDPR Compliance for Personal / Free Accounts
Hi, I work with various charities in the UK who often use free Dropbox accounts to share files for boards of trustees, teams etc. There is some confusion as to whether the GDPR compliance steps ...
- Hi Tom
As somebody in the UK the biggest thing you need to make sure is that the end users whos data is being stored is aware of it being stored AND that it is stored outside of the EU. Same goes if they email things in they need to know where those email servers are (e.g. Office365 = USA etc.).
Ed
Dropbox Staff
Dropbox StaffHi All
To add to that:
Our Dropbox Terms of Service and Privacy Policy govern Dropbox Basic, Professional and Plus products while our DPA is only applicable for Dropbox’s Business users. Additionally, Dropbox is bound by the language of the Privacy Policy with respect to Dropbox Business customers and the users on a Dropbox Business team.
While Data Processing Amendments are only for Dropbox Business customers, Dropbox will meet the requirements of the GDPR by May 25, 2018 as required across all its services, including Dropbox Basic, Plus, Pro, and Business.
To add to that:
Our Dropbox Terms of Service and Privacy Policy govern Dropbox Basic, Professional and Plus products while our DPA is only applicable for Dropbox’s Business users. Additionally, Dropbox is bound by the language of the Privacy Policy with respect to Dropbox Business customers and the users on a Dropbox Business team.
While Data Processing Amendments are only for Dropbox Business customers, Dropbox will meet the requirements of the GDPR by May 25, 2018 as required across all its services, including Dropbox Basic, Plus, Pro, and Business.
So is this likely to change or are we all going to need to cancel our subscriptions please ? I pay for Dropbox already but not business as I am a one man band photography business. I don't need all that extra storage. I just need enough to transfer images. I will need to find somebody else if I can't show a DPA.
Dropbox does not guarantee that they store the data of business customers in Europe. I asked and they said that if I have 250 users I can negotiate it :-(
But that is not a requirement for de GDPR, but you do need to inform your customers that the data can be stored in the US (which is of course something not everybody will like given how the US government gets access to data).
nicolabisseker wrote:So is this likely to change or are we all going to need to cancel our subscriptions please ? I pay for Dropbox already but not business as I am a one man band photography business. I don't need all that extra storage. I just need enough to transfer images. I will need to find somebody else if I can't show a DPA.
It seems so - you will need one of the business accounts where a DPA is available. However, if you are already paying - it might be that the business accounts might not be much more than you already paying and you could upgrade?
