Under the European Union Data Protection Directive 95/46/EC, companies must ensure certain safeguards when transferring personal data from the European Union and the European Economic Area to the United States. Dropbox relies upon a variety of legal mechanisms to transfer personal data, including contracts with our users.

Dropbox is certified and complies with the EU-U.S. Privacy Shield Program ("Privacy Shield") framework and its principles as set forth by the US Department of Commerce and the European Commission regarding the collection, use, and retention of personal data from EU member states. Dropbox is also certified and complies with the U.S.-Swiss Safe Harbor ("Safe Harbor") framework and principles as set forth by the US Department of Commerce and the Federal Data Protection and Information Commissioner of Switzerland. You can find Dropbox’s Privacy Shield certification here, and you can find our Safe Harbor certification here. You can also learn more about Privacy Shield at https://www.privacyshield.gov and Safe Harbor at http://2016.export.gov/safeharbor/swiss/.

Adhering to the Privacy Shield and Safe Harbor Principles ensures an organization provides adequate privacy protection under the EU data protection directive. To learn more, please see our Privacy Policy (dropbox.com/privacy).