Whenever you are working with personal data you do have to use GDPR compliant data sharing tools:
When you are using non-personal data and data that is not proprietary, so data that is open access, you can user non-GPDR compliant tools:
You are personally responsible for using the correct tool for your science data.