Incident #5EDBE3 · 27 APR 2026major
GitHub Copilot privacy policy adds explicit use of personal data for AI model training
The policy now says Personal Data is used to develop and improve products, including AI and machine learning, and to train models. Sharing with Microsoft and other affiliates is widened to cover AI training and product development. The detailed private-repository access rules are replaced by a pointer to the GitHub Terms of Service.
Taken from you
- Personal Data, including AI outputs and inputs, may now be used to train and improve AI/ML models
- Affiliates like Microsoft may receive data for product development and AI training, and for purposes in their own privacy statements
- Privacy statement no longer itself lists limits on GitHub access to private repos or promises notice of such access
- Legitimate-interest processing now explicitly covers AI and machine learning development
Won back
- Statement that aggregation and de-identification are applied where feasible
- Affiliates are no longer bound to use shared data consistently with this Privacy Statement; they now only need to follow applicable law and their own privacy commitments
Evidence · 4 of 4 quotes matched in source
We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies.+ inserted · ✓ matched in source
This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models.+ inserted · ✓ matched in source
product development and improvement (including training and improving artificial intelligence and machine learning technologies), and for other purposes described in their respective privacy statements.+ inserted · ✓ matched in source
Archived version ↗ · 538 words changed