@Edent I don't understand this statement from them "WordPress.org is privately owned by a person, not by a registered or covered entity." because that doesn't matter. Referreing to the ICO website ico.org.uk/for-organisations/u… I quote
Some things are not listed here as exemptions, although in practice they work a bit like an exemption. This is simply because they are not covered by the UK GDPR. Here are some examples:
"Domestic purposes – personal data processed in the course of a purely personal or household activity, with no connection to a professional or commercial activity, is outside the UK GDPR’s scope. This means that if you only use personal data for such things as writing to friends and family or taking pictures for your own enjoyment, you are not subject to the UK GDPR."
The data has to be "with no connection to a professional or commercial activity" to be outside the UK GDPR’s scope - Running a Open Source project would not be "personal or household activity"