Other Covered Entities

GitHub HealthPlan, Inc.


  • Information and Communications Technology
  • Information Technology Services
  • Information Services


EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 1/26/2017
Next Certification Due Date: 1/26/2018
Data Collected: HR, NON-HR

Purpose of Data Collection

GitHub processes organizational, customer, and user personal data for various purposes, including user identification; providing support; and enabling sales, marketing, and business transactions; as well as performing internal data analysis to improve our product and services. GitHub also processes employee data for the purposes of providing human resources services, including payroll and health insurance (our subsidiary, GitHub HealthPlan, processes employee data to provide health insurance). GitHub discloses personal information to third parties to process payment, assist in support ticketing, and provide other network and communications services.

Privacy Policy

HR Data

GitHub Internal Privacy & Data Use Policy

GitHub's Internal Privacy & Data Use Policy describes how GitHub's employees are permitted to access, share, disclose, and use personal information about other employees and about GitHub's users.

Effective Date: 9/8/2016

Non-HR Data


GitHub's Privacy Statement covers GitHub's data practices for its users, both individual and organizational. GitHub does not sell personal information to any third parties for their commercial purposes; GitHub does not host third party advertising; and GitHub gathers only a small amount of information and we use it only for the limited purposes of providing services to our users.

Effective Date: 8/26/2016

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact GitHub, Inc. at:

Hannah Poteat
Privacy Counsel
GitHub, Inc.
GitHub, Inc.
88 Colin P Kelly Jr Street
San Francisco, California 94107
Fax: 415-520-5597

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from GitHub, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against GitHub, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission