Provision record
GitHub · GitHub Privacy Statement · View original document ↗

Security controls to protect Personal Data

Medium severity Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time GitHub changes these terms. Follow GitHub →
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity GitHub recorded 6 documented changes in the last 30 days.
Follow GitHub →
Monitor governance changes for GitHub Monitor emails you the same day this changes. The archive stays free.
Follow GitHub →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

High Apr 28, 2026

The updated terms now explicitly authorize GitHub to collect AI outputs generated within the platform alongside user-provided code and content, and to share personal data with Microsoft and other GitHub affiliates for purposes including training and improving artificial intelligence and machine learning technologies. The privacy statement indicates that aggregate and de-identified data will be used where feasible, but the updated language establishes broader authority for affiliate data sharing and AI model development than the previous version stated. The revised terms also remove specific disclosure of the conditions under which GitHub personnel may access private repositories, replacing that detail with a cross-reference to the Terms of Service, which means the scope of internal GitHub access to private repositories is now defined in a separate contract document rather than the privacy statement itself.

View change record →

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 1255 other provisions on other platforms.

How other platforms handle this

Cerebras Medium

We have implemented administrative, technical, physical, electronic, and managerial procedures to safeguard and secure the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

Skillshare Medium

Please recognize that protecting your Personal Data is also your responsibility. We urge you to take every precaution to protect your information when you are on the Internet...

Mixpanel Medium

Mixpanel maintains administrative, technical, and physical safeguards designed to help protect your personal data to prevent loss, misuse, and unauthorized access, disclosure, alteration, and destruction.

See all platforms with this clause type →

Monitoring

GitHub has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Follow GitHub → Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
GitHub uses appropriate administrative, technical, and physical security controls to protect your Personal Data.

Excerpt from GitHub's Privacy Statement

Provision details

Document information
Document
GitHub Privacy Statement
Entity
GitHub
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 12, 2026
Record ID
CA-P-036683
Document ID
CA-D-00254
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
d21b58443ca0b4402240dbd06996ada072c72ed842fcccc6b13acab2d7bc6c4d
Analysis generated
May 10, 2026 09:46 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: GitHub
Document: GitHub Privacy Statement
Record ID: CA-P-036683
Captured: 2026-05-10 09:46:36 UTC
SHA-256: d21b58443ca0b440…
URL: https://conductatlas.com/platform/github/github-privacy-statement/provision/CA-P-036683/security-controls-to-protect-personal-data/
Accessed: July 26, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention

Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.

Frequently Asked Questions

What does GitHub's Security controls to protect Personal Data clause do?

The clause states: “GitHub uses appropriate administrative, technical, and physical security controls to protect your Personal Data.”

Is ConductAtlas affiliated with GitHub?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.