Under the European Union Data Protection Directive 95/46/EC, companies must ensure certain safeguards when transferring personal data from the European Union and the European Economic Area to the United States. Dropbox relies upon a variety of legal mechanisms to transfer personal data, including contracts with our users.
Dropbox complies with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the European Economic Area, and Switzerland to the United States. You can find the Dropbox Privacy Shield certification at www.privacyshield.gov/list. You can also learn more about Privacy Shield at www.privacyshield.gov.