Dropbox · Dropbox Privacy Policy

GDPR Rights for EEA and UK Users

Medium severity
Share 𝕏 Share in Share

Why it matters

EEA and UK users have strong legal rights under GDPR that give them significant control over their personal data held by Dropbox, including the right to demand deletion or a copy of all their information.

Consumer impact

Dropbox collects extensive personal data including file contents, usage patterns, device identifiers, and contacts, and may use this data to train and improve AI and machine learning features. Business account administrators have significant control over employee accounts, including the ability to access, restrict, or delete content stored in those accounts. You can review and adjust your privacy settings, request data deletion, or opt out of certain data uses by visiting the Dropbox Privacy Settings page at dropbox.com/account/security.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    EEA and UK users can submit a Subject Access Request or data portability request through Dropbox's privacy settings or privacy request form. Dropbox is required to respond within 30 days under GDPR.

Applicable agencies

  • State AG
    While primarily a GDPR matter, State AGs in US jurisdictions with similar privacy laws (e.g. California, Virginia) may have parallel enforcement authority for residents exercising similar rights.
    File a complaint →

Provision details

Document information
Document
Dropbox Privacy Policy
Entity
Dropbox
Document last updated
March 24, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-001041
Document ID
CA-D-00196
Evidence Provenance
Source URL
Wayback Machine
SHA-256
e79e0028df779e64383b66ccc3c4c5747677bf6476de9303c1206de45ecc82cc
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Dropbox | Document: Dropbox Privacy Policy | Record: CA-P-001041
Captured: 2026-03-20 04:47:54 UTC | SHA-256: e79e0028df779e64…
URL: https://conductatlas.com/platform/dropbox/dropbox-privacy-policy/gdpr-rights-for-eea-and-uk-users/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document