GDPR - server location

[fh1]

We are considering purchasing a team account standard.

Does this account guarantee the server location in the EU - or even better in Germany?

We need to know this because of the GDPR.

[Jay · Accepted solution]

Hi there, data stored in Dropbox is located in the EU and US.  

We continue to offer to host business customers’ files in Europe if they choose this option however the personal data that is entrusted to us is protected equally under GDPR whether it is hosted in Europe or the US.

Currently the ability to store files on our European infrastructure is available only to European Dropbox Business, Enterprise, and Education customers with 250+ licenses. 

[fh1]

So sad you are treating smaller companies so badly.

If we need to store our data in a right GDPR-complient way, we need to change the service.

We would pay a higher fee for storing data only within the EU - but if it is not possible...

[Jay]

I understand how you feel. If there was another option I would’ve let you know, but the only method to have your data stored on an EU server is as I mentioned previously.

[Mark]

Just as a side note as well please remember that this law has now been in place a month or so.... so you need to think about what you are doing quickly if you are deeming Dropbox none-compliant. 

[fh1]

Mark, unfortunatly this is not right...

GDPR was released at may 2016. There was only a two-year transition period.

If it is possible for companies with +250 licenses - why not for everyone?

And: unfortunately the GDPR is valid for us immediately - we cannot wait.

[Mark]

@fh1 - what I said is correct. GDPR is now live and has been for almost a month:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

[fh1]

Not at all..

https://www.eugdpr.org/

After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. Enforcement date: 25 May 2018 - at which time those organizations in non-compliance may face heavy fines. 

[Mark]

Which is what I've said.

As you believe you are none-compliant by using Dropbox you need to get alternative arrangements in ASAP.

[Rich]

---

@fh1 wrote:

After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. Enforcement date: 25 May 2018  ...

---

Semantics...

It's clearly obvious that @Mark was referring to the deadline for compliancy, and not the date that the law went into effect.