The Hamburg Data Protection Authority issued an insightful discussion paper addressing privacy risks and the usage of LLMs that in their view do not process personal data.