This is not about what github collect about its own usage, it was about other people mirroring your commits on github and the fact that those commits contains P

This is not about what github collect about its own usage, it was about other people mirroring your commits on github and the fact that those commits contains PIIs. It is reasonable to assume that FOSS licenses also cover the commit. IMHO at this point the transaction is more comparable to you selling your personal diary on ebay, you have no right to force the buyer to destroy it under the GDPR