We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.
Forum Discussion
GDPR Compliance for Personal / Free Accounts
Hi, I work with various charities in the UK who often use free Dropbox accounts to share files for boards of trustees, teams etc. There is some confusion as to whether the GDPR compliance steps ...
- Hi Tom
As somebody in the UK the biggest thing you need to make sure is that the end users whos data is being stored is aware of it being stored AND that it is stored outside of the EU. Same goes if they email things in they need to know where those email servers are (e.g. Office365 = USA etc.).
From what I understand my business account will need to sign a DPA with Dropbox to fullfill the new GDPR-legislation? Other platforms such as MailChimp has made this easy, but I can not find any information about signing this agreement on this site?
Rich
Super User II
Super User IIYou'll want to contact Dropbox Business Support. The options for doing so can be found in your Admin console under Help, or you can open a ticket.
Open your ticket here: https://dropbox.com/support
Track your ticket here: https://dropbox.zendesk.com
Replies take approximately 1 - 3 business days with Plus, Professional and Business users getting priority (longer for Basic users).
- Ed
Dropbox Staff
Hi all
Thanks for your patience on this matter. Our legal team has just confirmed that we're GDPR compliant and has updated this page: https://www.dropbox.com/business/trust/compliance/certifications-compliance
Thank youThanks Ed, but regarding the topic being discussed here it sounds a bit misleading that you comply.
I can find no information in the link you provide about a Data Processing Agreement. If you want to be compliant for people using Dropbox professionally, you need to offer such agreements. The information I have is that you only provide it for business account users, thus excluding all those contractors and small businesses that only need a single or two accounts. So no matter what technical measures you take, if you don't provide such an agreement many will have to stop using Dropbox to store personal information of clients.
Kind regards,
Auke
Yes, thanks Ed. I'm sure You (dropbox) comply in every way possible, but that is beside the point of this discussion. What I want is for ME (the user) to comply, and a can't do that without a Data Processing Agreement (DPA), and that DPA is not available to me even though I'm a paying customer. The way I read the information in the link you provided, I have to upgrade from my pro plan to a business plan to get a DPA. Otherwise, I am not able to be compliant.
Hi Ed,
leaves us with the open question: what about your customers that are running small businesses, pay for your services and don't need a business version. I could be interested in getting to know, how many accounts we're talking in Europe, that you obviously want to force to upgrade - or to change to another provider, if the small businesses want to comply to the rules. What is our very intention!
I got very excited when I saw your reply Ed, but as others have said - nothing has changed for those of us who use DropBox professionaly but cannot afford to pay for a business account, which is the only way any of us can currently get a Data Processing Agreement from DropBox.
Can you please confirm if DropBox are indeed looking into providing a Data Processing Agreement for those without a business account - as we would like to continue using DropBox if we can, but can only do that if we have a DPA. If a DPA isn't going to be available, we will need to cancel our DropBox account and go with a provider who will provide a DPA.
Many thanks
