Live data from Hacker News

Updates to GitHub Copilot interaction data usage policy

github.blog

161–170 of 193 posts

Re: Updates to GitHub Copilot interaction data usage policy

#161
post #58

What is the legal basis of this in the EU? Ignoring the fact they could end up stealing IP, it seems like the collected information could easily contain PII, and consent would have to be > freely given, specific, informed and unambiguous. In order to obtain freely given consent, it must be given on a voluntary basis.

It breaks GDPR easily: GDPR enforces you to comply with opt-out by default, no workaround by prefilling before hitting submit. While some think this applies only to personal data, then yes. But it takes only one line of code to use my phone number for testing while I test locally a register form in the application I'm developing. Once it gets sent to Copilot I can threaten with legal action if they are not taking it…

Based on https://github.blog/changelog/2026-03-25-updates-to-our-priv..., it looks like they are going to go for “legitimate interest” which seems clearly overridden by data subject interests in this case, hence not lawful.

If you don't want to wait until your PII inevitably gets sent through, you can already now file a complaint to your local supervisory authority: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

Re: Updates to GitHub Copilot interaction data usage policy

#162

If you scroll down to "Allow GitHub to use my data for AI model training" in GitHub settings, you can enable or disable it. However, what really gets me is how they pitch it like it’s some kind of user-facing feature: Enabled = You will have access to the feature Disabled = You won't have access to the feature As if handing over your data for free is a perk. Kinda hilarious.

[deleted]

Re: Updates to GitHub Copilot interaction data usage policy

#163
The fact that this is on by default, especially for paid accounts and even more especially for organizations, where certain types of privacy is sometimes mandated by the industry your business is in, is ridiculous.

There should also be a much easier one-click to opt out without having to scroll way down on the settings page.

Re: Updates to GitHub Copilot interaction data usage policy

#165
post #145

Earlier quoted context omitted.

We are not. The reason we wanted to announce early was so that folks had plenty of time to opt-out now. We've also added the opt-out setting even if you don't use Copilot so that you can opt-out now before you forget and then if you decide to use Copilot in the future it will remember your preference.

Would you be able to comment on https://news.ycombinator.com/item?id=47522876 , i.e. explain the legal basis for this change for EU based users? If there is none, you may have to expect that people will exercise their right to lodge a complaint with a supervisory authority.

Why would you expect an engineer to be able to comment on legal affairs? Presumably it was cleared with Microsoft's legal department or whatever GitHub's divisional equivalent is.

Re: Updates to GitHub Copilot interaction data usage policy

#167
post #6

Earlier quoted context omitted.

> What on earth are they thinking... @mariorod's public README says one of his focuses is "shaping narratives and changing \"How we Work\"", so there you go.

"shaping narratives", sounds like they follow the methodologies of a current president

which one?

Re: Updates to GitHub Copilot interaction data usage policy

#168

Earlier quoted context omitted.

That's akin to being grateful for your local shop owner that they allowed you to sweep the floor for other customers.

Please don’t strawman me, I asked completely different question. It’s not about being grateful or something, but that many people (devs) are too concerned about their code being stolen as if they’ve come up with something unique and the LLMs are some kind of database (which it isn’t). At the end of the day we’re going to be using AI to write all the code, many of us already doing that. And if some GitHub copilot mode…

If something is mine by right, no matter how little or lot worth it has noone shoule be allowed to force/trick me to donate it. It should just be my choice.

Re: Updates to GitHub Copilot interaction data usage policy

#169

Earlier quoted context omitted.

Please don’t strawman me, I asked completely different question. It’s not about being grateful or something, but that many people (devs) are too concerned about their code being stolen as if they’ve come up with something unique and the LLMs are some kind of database (which it isn’t). At the end of the day we’re going to be using AI to write all the code, many of us already doing that. And if some GitHub copilot mode…

If something is mine by right, no matter how little or lot worth it has noone shoule be allowed to force/trick me to donate it. It should just be my choice.

[dead]

Re: Updates to GitHub Copilot interaction data usage policy

#170

Earlier quoted context omitted.

I use Gemini 3 to edit multiple forks. Your statement is false based on stuff I actually do.

Well it's true based on my running into the issue 8 hours ago

Maybe it's your prompts? I've never had Gemini refuse to write any code in any context. I use it with Claude prompts, edited down, in particular to remove guardrails.

You shouldn't use Google Ai products, they are inferior. Their models are quite good. It's confusing when people use the model name when referring to a product. What's your setup?

Post reply on HN