34 Disable Google Takeout

Caveats

• Nine services carry their own Takeout switch¹
• Takeout off does not stop data leaving²
• Takeout is applied per OU or configuration group, not per user³
• Changes can take up to 24 hours to propagate⁴

Setup steps

1. open ↗

   

   https://admin.google.com/ac/managedsettings/850805570439 · captured 2026-07-15

   Data › Data import & export › Google Takeout ↗

   Select the root org — or the OU (organizational unit) holding sensitive staff — in the left OU tree, then open the consolidated Takeout controls page.

   OU

   root / high-risk OU

   How the organizational structure works ↗

2. Data › Data import & export › Google Takeout › User access to Takeout for Google services

   Turn off the shared 'Data export permission' that governs Drive, Gmail, Calendar, Chat and the other jointly-controlled core services.

   Data export permission

   Don't allow for everyone

3. Data › Data import & export › Google Takeout › Services with individual controls

   Turn Takeout off individually for each service that is NOT covered by the shared toggle — these each carry their own switch and stay ON otherwise.

   YouTube, Google Photos, Blogger, Google Play, Google Pay, Location History, Google Maps, Google Books, Play Console = OFF

4. open ↗

   

   https://admin.google.com/ac/users · captured 2026-07-15

   Directory › Users ↗

   Confirm the users you intended to cover actually sit in the OU you changed — Takeout applies per OU or configuration group, not per user.

   Verify OU membership

   Move users to an organizational unit ↗

How to verify

1. As a test user, open takeout.google.com — the covered services must refuse export ("service not available"). User-visible, no admin access needed.