We are considering purchasing a team account standard. Does this account guarantee the server location in the EU - or even better in Germany? We need to know this because of the GDPR.

Hi there, data stored in Dropbox is located in the EU and US. We continue to offer to host business customers’ files in Europe if they choose this option however the personal data that is entrusted to us is protected equally under GDPR whether it is hosted in Europe or the US. Currently the ability to store files on our European infrastructure is available only to European Dropbox Business, Enterprise, and Education customers with 250+ licenses.

GDPR - server location | The Dropbox Community

20 Replies

Replies have been turned off for this discussion

Jay
Dropbox Community Moderator
8 years ago
Hi there, data stored in Dropbox is located in the EU and US.

We continue to offer to host business customers’ files in Europe if they choose this option however the personal data that is entrusted to us is protected equally under GDPR whether it is hosted in Europe or the US.

Currently the ability to store files on our European infrastructure is available only to European Dropbox Business, Enterprise, and Education customers with 250+ licenses.
fh1
Helpful | Level 6
8 years ago
So sad you are treating smaller companies so badly.

If we need to store our data in a right GDPR-complient way, we need to change the service.

We would pay a higher fee for storing data only within the EU - but if it is not possible...
Jay
Dropbox Community Moderator
8 years ago
I understand how you feel. If there was another option I would’ve let you know, but the only method to have your data stored on an EU server is as I mentioned previously.
Mark
Super User II
8 years ago
Just as a side note as well please remember that this law has now been in place a month or so.... so you need to think about what you are doing quickly if you are deeming Dropbox none-compliant.
fh1
Helpful | Level 6
8 years ago
Mark, unfortunatly this is not right...

GDPR was released at may 2016. There was only a two-year transition period.

If it is possible for companies with +250 licenses - why not for everyone?

And: unfortunately the GDPR is valid for us immediately - we cannot wait.
Mark
Super User II
8 years ago
fh1 - what I said is correct. GDPR is now live and has been for almost a month:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/
fh1
Helpful | Level 6
8 years ago
Not at all..

https://www.eugdpr.org/

After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. Enforcement date: 25 May 2018 - at which time those organizations in non-compliance may face heavy fines.
Mark
Super User II
8 years ago
Which is what I've said.

As you believe you are none-compliant by using Dropbox you need to get alternative arrangements in ASAP.
Rich
Super User II
8 years ago
fh1 wrote:

After four years of preparation and debate the GDPR was finally approved by the EU Parliament on 14 April 2016. Enforcement date: 25 May 2018 ...

Semantics...

It's clearly obvious that Mark was referring to the deadline for compliancy, and not the date that the law went into effect.
Mark
Super User II
8 years ago
Actually, to add here that the dates I gave are when it came in to effect within the UK (hence my UK link).

If your country has had requirements and compliance enforcements longer than this then its different