• I'm not a lawyer, but GitHub has published a lengthy data protection statement which mentions the GDPR several times. For the moment, this looks somewhat promising.

    @Gordon I don't know the current regulations in the UK - but in the EU one would have to prove GDPR compliance of all used (sub)services as well (by proper data protection statements and subcontracts)