Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Charity has a server in their office onto which they backup a database with sensitive information. They want to get rid of this server.

Is there a cost effective solution that would allow them to comply with UK Data Protection Act?

Currently I think about encrypted version stored at Dropbox.

share|improve this question
add comment

1 Answer

Dropbox is compliant with the Data Protection Act, the main worry is point 8 of the Act:

Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

If a company is outside the EU and in the USA then there is a 'Safe Harbor' list maintained of companies that fulfil the the level of protection clause.

Here's a blog post from Dropbox saying they are now Safe Harbor certified and a link to the Safe Harbor site so you can check for yourself, might also be worth checking for other companies you're considering.

Dropbox Blog: http://blog.dropbox.com/?p=972

Safe Harbor List: http://safeharbor.export.gov/list.aspx

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.