The new policy, which goes into effect March 24, acknowledges that Dropbox might share user data with outsiders to comply with the law, "if we determine that such disclosure is reasonably necessary."  An email to users immediately adds that the company will follow its own Government Request Principles, guidance that obliquely antagonizes the National Security Agency and includes fighting requests for bulk data.

"Government data requests should be limited to specific people and investigations," the principles state. "We’ll resist requests directed to large groups of people or that seek information unrelated to a specific investigation." 

Would the federal teleworker cohort also be protected? A mobile worker toolkit guide distributed by the General Services Administration suggests that teleworkers consider using Dropbox as "basic mobility equipment."