Indefinite gag orders: the users Dropbox is barred from ever warning
January–June 2021
Dropbox's own Transparency Report shows that a large share of the search warrants it receives arrive with indefinite non-disclosure orders, leaving the company unable to ever notify those users that the government took their data.
What happened
Dropbox's stated policy is to notify users when their account is named in a law-enforcement request, so they have a chance to contest it. But that promise is routinely overridden by court-ordered gag provisions under 18 U.S.C. 2705(b), and Dropbox's own figures show how often. For the January–June 2021 reporting period, the company disclosed that it produced some information in response to 89.6% of search warrants received, and that 19.7% of those warrants came with court orders for non-disclosure of indefinite duration — orders that may prevent Dropbox from ever notifying roughly 19.3% of the affected users.
An earlier reading of Dropbox's reports found a far higher rate: coverage of one transparency cycle reported that around 80% of law-enforcement requests arrived with gag orders. Whatever the exact share in a given period, the pattern is consistent — a meaningful slice of government demands carries a silence requirement, and an indefinite gag means the affected user has no expiry date after which they will learn what happened.
The notification promise, in other words, is real but conditional, and the condition is set entirely by the government and the courts.
Impact
The gag-order data quantifies a gap between Dropbox's user-notification commitment and what users actually receive. For the people behind those indefinitely-sealed warrants, the protection of being told 'the government asked for your files' simply never arrives. It is a documented limit on the recourse Dropbox advertises, and a reminder that the company's transparency depends on permissions it does not control.