All data is encrypted on the user's device before being uploaded. MEGA does not have access to the decryption keys or the user's password, meaning it cannot read or share user content.
Since this move, MEGA operates under Hungarian and European Union law , including the General Data Protection Regulation (GDPR) and the Digital Services Act (DSA) . All data is encrypted on the user's device
While user content is encrypted, MEGA can provide "Basic Subscriber Information" (metadata like IP addresses and email) to law enforcement in cases of serious illegal activity through established legal channels like the European Investigation Order . 4. Content Safety and Takedown Policies All data is encrypted on the user's device