• Information and Communications Technology
  • Information Technology Services
  • Information and Communications Technology
  • Software


Swiss-U.S. Privacy Shield Framework: Active

Original Certification Date: 5/24/2017
Next Certification Due Date: 6/6/2020
Data Collected: NON-HR

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 9/23/2016
Next Certification Due Date: 6/6/2020
Data Collected: NON-HR

Purpose of Data Collection

Dropbox provides a website, software, and mobile applications which allow people to store files, synchronize files across multiple devices, and collaborate with others. Dropbox offers services to individual users on both a free and paid subscription basis (Dropbox Basic, Plus, and Professional, respectively). Dropbox also offers services intended for use within teams and organizations on a paid subscription basis (Dropbox Business Standard, Dropbox Business Advanced, Dropbox Business Enterprise, Dropbox Business Advanced Server Integration, Dropbox Enterprise Server Integration, and Dropbox Education). Certain Dropbox services may also be accessed by Application Programming Interfaces (APIs), which taken together, are elements of the Dropbox Developer Platform. Dropbox also offers a service called Dropbox Paper, which allows people to collaborate using cloud-based documents. Dropbox collects personal data from individuals in European Union member states for the purposes of providing and improving these services, entering into contracts, providing customer support, as well as enforcing its Terms of Service and Business Agreement. Dropbox uses certain trusted third parties (for example, providers of customer support and IT services) to help provide, improve, protect, and promote their Services. The trusted third parties may access User information only to perform tasks on Dropbox’s behalf, and in compliance with Dropbox’s Privacy Policy. Dropbox remains responsible for the handling of User information, and the trusted third parties only act per Dropbox’s instruction. Dropbox may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process, or appropriate government request; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of Dropbox or our users; (d) protect Dropbox’s rights, property, safety, or interest; or (e) perform a task carried out in the public interest.

Privacy Policy

Non-HR Data


The Dropbox Privacy Policy describes how Dropbox websites, software, and services collect, use, and handle users' personal information when they use Dropbox websites, software, and services (“Services”).

Effective Date: 5/25/2018

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Dropbox, Inc. at:

William Yoon
Senior Legal Director
Dropbox, Inc.
333 Brannan Street
San Francisco, California 94107

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Dropbox, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against Dropbox, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission