Dropbox Watchdog

Search issues

Search the Dropbox Watchdog archive

All issues

Indefinite gag orders: the users Dropbox is barred from ever warning

January–June 2021

MediumStatus: Ongoing ~19.3% of warrant-affected users in H1 2021 (indefinite gag) affectedProduct: Core syncYear: 2021

Dropbox's own Transparency Report shows that a large share of the search warrants it receives arrive with indefinite non-disclosure orders, leaving the company unable to ever notify those users that the government took their data.

What happened

Dropbox's stated policy is to notify users when their account is named in a law-enforcement request, so they have a chance to contest it. But that promise is routinely overridden by court-ordered gag provisions under 18 U.S.C. 2705(b), and Dropbox's own figures show how often. For the January–June 2021 reporting period, the company disclosed that it produced some information in response to 89.6% of search warrants received, and that 19.7% of those warrants came with court orders for non-disclosure of indefinite duration — orders that may prevent Dropbox from ever notifying roughly 19.3% of the affected users.

An earlier reading of Dropbox's reports found a far higher rate: coverage of one transparency cycle reported that around 80% of law-enforcement requests arrived with gag orders. Whatever the exact share in a given period, the pattern is consistent — a meaningful slice of government demands carries a silence requirement, and an indefinite gag means the affected user has no expiry date after which they will learn what happened.

The notification promise, in other words, is real but conditional, and the condition is set entirely by the government and the courts.

Impact

The gag-order data quantifies a gap between Dropbox's user-notification commitment and what users actually receive. For the people behind those indefinitely-sealed warrants, the protection of being told 'the government asked for your files' simply never arrives. It is a documented limit on the recourse Dropbox advertises, and a reminder that the company's transparency depends on permissions it does not control.

Dropbox's Response / Official Position

Dropbox discloses these non-disclosure figures in its Transparency Report and states that it gives users notice unless legally prohibited, and that it requires law enforcement to obtain a 2705(b) court order to bar notification.

Sources

Related guides

Spot an error, or have a source to add?
Report an error / suggest update

Related issues

Because Dash can be downloaded and set up with 'no sales or IT required,' an individual employee can connect and index an organization's apps and browser history without administrator oversight — recreating the shadow-IT data-governance risk that earlier consumer Dropbox use posed to enterprises.

Privacy & Encryption ConcernsCurrent / Ongoing Issues (2024–2026)Account Lockouts & Support Failures
Read documentation

Dropbox repeatedly assures users that AI features do not train on their data and that content is deleted within 30 days — but because these are revocable policy promises layered over server-side access rather than technical guarantees, security commentators remain skeptical that the assurances will hold.

Privacy & Encryption ConcernsCurrent / Ongoing Issues (2024–2026)
Read documentation

Through 2025 Dropbox pushed Dash to general availability with self-serve sign-up and no IT required, marketing it as an AI assistant that indexes content across all of a user's connected apps — a model that, by design, reaches far beyond the files stored in Dropbox.

Privacy & Encryption ConcernsProduct Changes & User BacklashCurrent / Ongoing Issues (2024–2026)
Read documentation

Dash connects to Google Workspace, Microsoft 365, Slack, Notion and more, and routes queries through large language models — leaving users to trust Dropbox's contractual assurances that connected and indexed data is not used to train third-party AI models.

Privacy & Encryption ConcernsCurrent / Ongoing Issues (2024–2026)Developer, API & Platform
Read documentation