Provision record
GitHub · GitHub Privacy Statement · View original document ↗

Data sharing with organization account that added you

High severity High confidence Common · 281 of 352 platforms
Stay ahead of the changes
Track GitHub and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Users added to an organization's account may have their Personal Data shared with that organization without initiating the sharing themselves.

Consumer impact (what this means for users)

If an organization adds you to its GitHub account, your Personal Data may be disclosed to that organization.

How other platforms handle this

Grubhub Medium

we do not share text messaging originator opt-in data and consent with third parties for marketing or promotional purposes.

TaskRabbit Medium

We may share your contact information with another user, or their legal or other authorized representative, to resolve an investigation or dispute related to, or arising from, an interaction between you...

Instacart Medium

We operate businesses and offer services or sell product lines jointly with third-party businesses (such as co-branded credit cards) and we may share your Personal Information with companies that offer co-branded services...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If an organization adds you to their GitHub account, we might share Personal Data with that organization to fulfill the commercial relationship.

Excerpt from GitHub's Privacy Statement

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
GitHub Privacy Statement
Entity
GitHub
Date stated by the document
April 27, 2026
As printed in GitHub’s text (version CA-V-007375), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
March 19, 2026
Text quoted from version
CA-V-006965, captured Sept. 16, 2026
Record ID
CA-P-036607
Document ID
CA-D-000254
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006965)
d3a0ee52adf03c98371850b396561b90fa3bfef5514bce7cee1e8a2a27da509e
Analysis generated
May 10, 2026 09:46 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006965, captured Sept. 16, 2026 (checked Oct. 5, 2026)
Not the current version. The document's current version is CA-V-007375, captured Oct. 7, 2026; this clause has not been re-checked against it.
Citation Record
Entity: GitHub
Document: GitHub Privacy Statement
Record ID: CA-P-036607
Version: CA-V-006965
Captured: 2026-09-16 00:42:39 UTC
SHA-256: d3a0ee52adf03c98…
URL: https://conductatlas.com/platform/github/github-privacy-statement/provision/CA-P-036607/data-sharing-with-organization-account-that-added-you/
Accessed: Oct. 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does GitHub's Data sharing with organization account that added you clause do?

Users added to an organization's account may have their Personal Data shared with that organization without initiating the sharing themselves.

How does this clause affect you?

If an organization adds you to its GitHub account, your Personal Data may be disclosed to that organization.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.

Is ConductAtlas affiliated with GitHub?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.