---
title: ""
canonical: "https://studiomeyer.academy/en/playbooks/lokale-ki-und-die-dsgvo"
language: en
publisher: "StudioMeyer Academy, https://studiomeyer.academy (llms.txt: https://studiomeyer.academy/llms.txt)"
---

[← Alle Playbooks](https://studiomeyer.academy/playbooks)

Playbook· lokal

# Local AI and the GDPR, what it really solves and what it does not

Local does not automatically mean compliant. Ten steps through the question of which privacy problems your own machine actually removes, which remain, and what a setup looks like that survives an audit.

"We run it locally, so we have no data protection problem." You hear that sentence a lot, and it is half right. The half that is true matters enough that local models can be worth it for that reason alone. The half that is not true catches up with you if you do not know about it.

This playbook separates the two. It is not legal advice and does not replace any, it sorts the questions so you know which ones you even have to ask.

## 1\. Understand what local actually removes

The real problem with cloud services is transmission. The moment a piece of personal data goes to a provider, you need a legal basis for it, a settled allocation of roles with the matching contract, and with providers outside the EU an answer to how the transfer is safeguarded. The role question is the one most often answered wrongly: a data processing agreement only fits if the provider genuinely acts as a processor. If it uses the data for its own purposes, it is a controller in its own right or a joint controller, and then something else is needed. That is decided per service and per purpose, not across the board.

If the model runs on your machine, that chain falls away for the inference step. For it there is no recipient, because nothing is received.

What matters, though, is the whole chain and not just the model. A local interface can still call out: web search switched on, a cloud embedding service for document retrieval, a third-party model wired in as a second opinion, telemetry, a cloud backup of the history. In all of those cases your data does leave, even though the model computes locally. Before sensitive documents go in, check once actively: web search off, embeddings local, no third-party model registered, telemetry off, port bound to localhost only, and the backup target demonstrably in your own house rather than in a cloud. Only then does the sentence "nothing leaves the house" hold.

**Tip:** This is exactly where the value lies for law firms, medical practices, tax advisers and HR departments. Not because the model is better, but because in a properly sealed setup the transmission question never arises.

## 2\. Understand what local does not remove

Everything else still applies. You are the controller in the sense of the regulation, with everything that entails.

You still need a legal basis for the processing itself. An entry in the record of processing activities is due. Data subject rights apply unchanged, so access, rectification, erasure. The principle of data minimisation applies. And if the processing carries high risk, you need a data protection impact assessment, regardless of where the computation happens.

**Tip:** The most common fallacy is that "on my machine" means "private". A company laptop holding client data is processing, offline too.

## 3\. Establish whether personal data is involved at all

Before you get into the hard questions, check the easy one. Many use cases need no personal data whatsoever. Rewriting a product description, summarizing a technical manual, commenting code, all of that is uncritical.

If you can leave personal data out, leave it out. That is the cheapest solution there is and it costs nothing but a moment of thought.

**Tip:** Pseudonymisation helps, but it does not make data anonymous. If a name is replaced by an identifier and you keep the mapping table, it remains personal data.

## 4\. Look at where the model itself comes from

The model is a file of weights. It contains no client data, but it comes from somebody, and the licence governs what you may do with it.

Apache 2.0 and MIT are uncomplicated. Other licences carry restrictions, on user numbers or on particular fields of use. For business use that gets checked, not assumed.

**Tip:** Download models from the official source of the respective family or from your runtime's official library. An anonymously uploaded copy with extra promises in the name is an unnecessary risk.

## 5\. Secure the machine it runs on

When the cloud drops out, you move into the responsibility. The machine with the local model and the processed documents is now the place where the data lives.

Disk encryption, screen lock, access restriction, a backup concept. Those are technical and organisational measures, and with local processing they are not less necessary than before, they are more.

**Tip:** Check where your interface writes the conversation history. Some drop it unencrypted into a folder in the user directory. That is a collection of your most sensitive inputs in one place nobody thinks about.

## 6\. Do not open the port by accident

Local runtimes listen on your own machine only by default. That is the right setting. Guides nonetheless often tell you to change the binding to all interfaces so you can reach it from your phone.

That makes the model reachable for anyone on the same network, usually without authentication. In an office network, or worse with a port forward in the router, that is wide open.

**Tip:** If you genuinely need remote access, use an encrypted tunnel rather than an exposed port. The convenience of an open address is not worth it.

## 7\. Remember the logs

Local does not mean traceless. Runtimes write logs, interfaces store histories, some tools park intermediate state in a database.

If personal data ends up there, those are processing operations with a retention period. So it needs deciding how long they stay and who can delete them. Having to answer an access request and then discovering that nobody knows where everything sits is an unpleasant half hour.

**Tip:** Write down once which three to five places take in data. That list is half the work for the record of processing activities.

## 8\. Keep the EU AI Act separate from the GDPR

These are two different bodies of law, and they get mixed up routinely. The GDPR asks what happens to personal data. The AI Act asks what the system does and what risk comes from it.

The deadlines are staggered, and more importantly Article 50 splits the duties across two different roles. That gets confused constantly.

As a **provider** of an AI system, paragraph 1 applies to you (disclosing that a person is talking to an AI system) and paragraph 2 (machine-readable marking of generated output). As a **deployer** using someone else's system, paragraph 4 applies: disclosing deepfakes and marking AI text published on matters of public interest. Paragraph 4 has exceptions, but they are narrower than their reputation: for artistic work the disclosure does not fall away, it is only presented more discreetly, and the exception for text applies only once a human has reviewed the content and somebody carries editorial responsibility. Neither exception touches the provider duties in paragraphs 1 and 2. If you intend to rely on one of them, read the wording rather than this summary.

On timing, 2 August 2026 applies to these transparency duties. For generative systems placed on the market before that date, the deadline for machine-readable marking under paragraph 2 runs until 2 December 2026. The high-risk obligations were pushed back by more than a year by the Digital Omnibus of 8 July 2026; Article 50 was left untouched. Do not quote a concrete high-risk date without checking the Official Journal first, the deferral is recent and secondary sources contradict each other.

In practice that means: work out which role you are in first. Anyone running a local model purely for themselves and publishing nothing is not affected by paragraph 4 at all.

That you run a model yourself changes none of this classification. What counts is the purpose.

**Tip:** The detail and the delineation are covered at length in [DACH legal, EU AI Act and GDPR](https://studiomeyer.academy/playbooks/dach-legal-eu-ai-act-und-dsgvo). This playbook names them only as far as they matter for local setups.

## 9\. State the advantage accurately, not too broadly

When you argue for local processing internally or with a client, phrase it precisely. "The data does not leave our building" is correct and strong. "That makes us GDPR compliant" is wrong, because compliance depends on the whole processing operation and not on where the computation happens.

The second sentence trips you up at the first critical follow-up question. The first one holds.

**Tip:** Anyone putting a legal statement into a proposal should have it checked by someone who carries liability for it. That is the data protection officer or a lawyer, not the AI and not this playbook.

## 10\. Write the setup down before anyone asks

One page is enough. Which model, on which machine, who has access, which data goes in, what is stored where, for how long, who may delete it.

That single page is the difference between a setup that survives an audit and one where everybody starts reconstructing. Writing it takes half an hour once you have gone through the steps above.

**Tip:** If several people on the team work with AI, a short rule about what may go in and what may not belongs with it. There is a template in [The AI policy for small teams](https://studiomeyer.academy/playbooks/ki-richtlinie-fuer-kleine-teams).

## What next

If the technical setup is not in place yet, start with [Your first local AI model in 30 minutes](https://studiomeyer.academy/playbooks/erstes-lokales-modell-in-30-minuten). The question of the right size is covered by [Which local model fits your hardware](https://studiomeyer.academy/playbooks/welches-lokale-modell-passt-zu-deiner-hardware). And for everyday work with cloud tools, where transmission does happen after all, there is [Data protection when working with AI tools](https://studiomeyer.academy/playbooks/datenschutz-mit-ki-tools).

## Sources

This playbook is orientation, not legal advice. Deadlines and interpretations change, check them at the primary source.

- Regulation (EU) 2024/1689 in the Official Journal, the authoritative text (Article 50 and everything else): https://eur-lex.europa.eu/eli/reg/2024/1689/oj
- European Commission, enforcement of the AI Act: https://digital-strategy.ec.europa.eu/en/policies/enforcement-ai-act
- Readable rendering of Article 50 (not an official source, for orientation): https://artificialintelligenceact.eu/article/50/
- The deferral of the high-risk deadlines comes from the Digital Omnibus package of summer 2026. Look up the amending act itself via EUR-Lex if you need it; I deliberately link no secondary source for that.
- German Data Protection Conference, guidance on AI and data protection: https://www.datenschutzkonferenz-online.de

[← Which local model fits your ha](https://studiomeyer.academy/playbooks/welches-lokale-modell-passt-zu-deiner-hardware) [MCP with local models, tools w →](https://studiomeyer.academy/playbooks/mcp-mit-lokalen-modellen)

Alle Playbooks

[01. From ChatGPT to Claude, guide in 10 steps](https://studiomeyer.academy/playbooks/von-chatgpt-zu-claude) [02. From ChatGPT to Codex, guide in 10 steps](https://studiomeyer.academy/playbooks/von-chatgpt-zu-codex) [03. Your first MCP server in 90 minutes](https://studiomeyer.academy/playbooks/erster-mcp-server-in-90-minuten) [04. Using memory portably, same memory in Claude, Codex and Cursor](https://studiomeyer.academy/playbooks/memory-portabel-nutzen) [05. DACH legal. EU AI Act and GDPR for AI operators](https://studiomeyer.academy/playbooks/dach-legal-eu-ai-act-und-dsgvo) [06. Your first sub-agent in 30 minutes](https://studiomeyer.academy/playbooks/erster-sub-agent-in-30-min) [07. Publishing an MCP server step by step](https://studiomeyer.academy/playbooks/mcp-server-publishen) [08. Hooks against hallucinations](https://studiomeyer.academy/playbooks/hooks-gegen-halluzinationen) [09. Git for AI, 30-minute quickstart](https://studiomeyer.academy/playbooks/git-fuer-ki-quickstart) [10. Scheduled agents with Claude Code routines](https://studiomeyer.academy/playbooks/scheduled-agents-mit-routines) [11. Avoiding tool sprawl, from 530 to 30 MCP tools per session](https://studiomeyer.academy/playbooks/tool-sprawl-vermeiden) [12. Claude Code update strategy, without your workflow suddenly breaking](https://studiomeyer.academy/playbooks/claude-code-update-strategie) [12. Structuring your subagent team, the six roles you need in a daily driver](https://studiomeyer.academy/playbooks/subagent-team-strukturieren) [13. Claude Code cost controls for daily drivers, staying under 30 dollars a day in 10 steps](https://studiomeyer.academy/playbooks/claude-code-cost-controls-fuer-daily-driver) [14. Your own slash commands for Claude Code, productive in 30 minutes](https://studiomeyer.academy/playbooks/eigene-slash-commands-fuer-claude-code) [15. Claude Code headless in CI/CD, a setup that runs tomorrow](https://studiomeyer.academy/playbooks/claude-code-headless-in-ci-cd) [16. Agent eval in 60 minutes, how to find out if your agent is any good](https://studiomeyer.academy/playbooks/agent-eval-in-60-minuten) [17. Plan Mode in Claude Code, the invisible seatbelt, when you need it and how to keep it on](https://studiomeyer.academy/playbooks/plan-mode-richtig-nutzen) [18. Debugging MCP when nothing works, the 10 checks that solve 90 percent of cases](https://studiomeyer.academy/playbooks/mcp-debuggen-wenn-nichts-geht) [18. Mastering prompt caching, from cache miss to an 80 percent hit rate in 10 steps](https://studiomeyer.academy/playbooks/prompt-caching-meistern) [19. Repair memory drift, when your agent's memory starts contradicting itself](https://studiomeyer.academy/playbooks/memory-drift-reparieren) [20. MCP STDIO security, what the OX Security story means for you](https://studiomeyer.academy/playbooks/mcp-stdio-sicherheit) [21. Opus 4.7 migration, what changed for API builders](https://studiomeyer.academy/playbooks/opus-4-7-migration) [22. Your first Skill in 30 minutes, when slash commands aren't enough](https://studiomeyer.academy/playbooks/erste-eigene-skill-in-30-min) [23. Managing the context window in long Claude Code sessions](https://studiomeyer.academy/playbooks/context-window-managen-claude-code) [24. Advisor Tool, Opus as advisor and Sonnet as executor in one API call](https://studiomeyer.academy/playbooks/advisor-tool-opus-als-berater-sonnet-als-executor) [25. Secure your MCP server with OAuth 2.1 in 60 minutes](https://studiomeyer.academy/playbooks/mcp-server-auth-mit-oauth-2-1) [26. Distributing plugin bundles via URL, --plugin-url in 30 minutes](https://studiomeyer.academy/playbooks/plugin-bundle-via-url-distribution) [27. Claude Code in a Team, how to keep CLAUDE.md alive without turning it into a trash bin](https://studiomeyer.academy/playbooks/claude-code-im-team-claude-md-gemeinsam-pflegen) [27. Loading third-party Claude Code plugins from ZIP and URL, safely in 20 minutes](https://studiomeyer.academy/playbooks/claude-code-plugins-aus-zip-und-url-laden) [28. Confused deputy audit for Claude Code, done in 25 minutes](https://studiomeyer.academy/playbooks/confused-deputy-audit-fuer-claude-code) [28. Your first Claude Code plugin in 60 minutes, from empty folder to installable bundle](https://studiomeyer.academy/playbooks/dein-erstes-claude-code-plugin) [29. Pull request reviews with Claude Code, 10 steps for a PR workflow nobody blocks anymore](https://studiomeyer.academy/playbooks/pull-request-reviews-mit-claude-code) [30. Claude Projects for non-coders, a productive workspace in 30 minutes](https://studiomeyer.academy/playbooks/claude-projects-fuer-nicht-coder) [31. Build a prompt library, reuse your favourite prompts without copy-paste](https://studiomeyer.academy/playbooks/prompt-bibliothek-aufbauen) [32. Output Styles for Claude Code, your own tone in 20 minutes](https://studiomeyer.academy/playbooks/output-styles-fuer-claude-code) [33. Statusline for Claude Code, context at a glance in 15 minutes](https://studiomeyer.academy/playbooks/statusline-fuer-claude-code) [34. Claude Code checkpoints and /rewind: your safety net for risky edits](https://studiomeyer.academy/playbooks/claude-code-checkpoints-und-rewind) [34. Keeping discovery files consistent so AI crawlers do not quote old nonsense bios](https://studiomeyer.academy/playbooks/discovery-files-konsistent-halten) [34. Debugging hooks when nothing fires](https://studiomeyer.academy/playbooks/hooks-debuggen-wenn-nichts-feuert) [34. Parallel Claude Code sessions with git worktrees, two branches at once without conflict](https://studiomeyer.academy/playbooks/parallele-claude-sessions-mit-worktrees) [34. Skill does not trigger, what to check in 10 steps before you type /command again](https://studiomeyer.academy/playbooks/skill-trigger-debugging) [34. Sub-agent or skill or MCP tool, which one do you pick when](https://studiomeyer.academy/playbooks/sub-agent-oder-skill-oder-mcp-tool) [35. Running parallel Claude Code sessions with git worktrees](https://studiomeyer.academy/playbooks/claude-code-mit-git-worktrees) [35. Memory backup before an update, so you do not cry over a schema migration bug](https://studiomeyer.academy/playbooks/memory-backup-vor-update) [36. AGENTS.md alongside CLAUDE.md, one repo context for several AI tools](https://studiomeyer.academy/playbooks/agents-md-neben-claude-md) [47. Generative Engine Optimization for small sites, so Perplexity and ChatGPT-Search cite you](https://studiomeyer.academy/playbooks/geo-fuer-kleine-sites) [50. Opus 4.8 migration, the first Opus update with no breaking changes](https://studiomeyer.academy/playbooks/opus-4-8-migration) [51. Background sessions with Claude agents: run long tasks without blocking your terminal](https://studiomeyer.academy/playbooks/background-sessions-mit-claude-agents) [52. Set up the Claude Code bash sandbox: isolate commands instead of blindly allowing them](https://studiomeyer.academy/playbooks/claude-code-bash-sandbox-einrichten) [53. From script to your own agent: the Claude Agent SDK in 90 minutes](https://studiomeyer.academy/playbooks/claude-agent-sdk-erster-eigener-agent) [54. Build an MCP App: interactive UI in your MCP tool instead of a wall of text](https://studiomeyer.academy/playbooks/mcp-app-interaktive-ui-bauen) [55. The expensive-model myth: when the top AI model is really worth it](https://studiomeyer.academy/playbooks/mythos-klasse-wann-lohnt-sich-das) [56. Setting up fallback models so Claude Code doesn't stall on overload](https://studiomeyer.academy/playbooks/claude-code-fallback-modelle) [57. Dynamic workflows in Claude Code, your first orchestrated multi-agent script](https://studiomeyer.academy/playbooks/dynamic-workflows-in-claude-code) [58. Security-guidance plugin for Claude Code, automatic security review while you build](https://studiomeyer.academy/playbooks/claude-code-security-guidance-plugin) [59. Claude Code acting up after a config change, how to find the cause](https://studiomeyer.academy/playbooks/claude-code-safe-mode-diagnose) [60. MCP is stateless: what the 2026-07-28 spec changes and what you need to do now](https://studiomeyer.academy/playbooks/mcp-spec-2026-07-was-aendert-sich) [61. Your first real n8n flow: automation for people who don't code](https://studiomeyer.academy/playbooks/mein-erster-n8n-flow-fuer-nicht-coder) [62. Agentic payments with x402, what builders need to know about machine-paid APIs](https://studiomeyer.academy/playbooks/agentic-payments-x402) [63. GPT-5.6 or Opus 5, which model for which task](https://studiomeyer.academy/playbooks/gpt-5-oder-opus-4-8-welches-modell) [64. Subagents that spawn subagents, Claude Code's 5-level rule](https://studiomeyer.academy/playbooks/subagents-die-subagents-spawnen) [65. Setting up Claude Code agent teams, multiple sessions working together](https://studiomeyer.academy/playbooks/claude-code-agent-teams-einrichten) [66. Tracking model availability, when a model vanishes overnight](https://studiomeyer.academy/playbooks/modell-verfuegbarkeit-tracken) [67. Data protection when working with AI tools: ten habits that keep you safe](https://studiomeyer.academy/playbooks/datenschutz-mit-ki-tools) [68. Using Auto Mode in Claude Code safely, in 10 steps without suicide commands](https://studiomeyer.academy/playbooks/claude-code-auto-mode-sicher-nutzen) [69. AI for the job hunt: 10 steps through the ATS filter](https://studiomeyer.academy/playbooks/ki-fuer-jobsuche) [70. Build an AI portfolio that lands you a job, in 10 steps](https://studiomeyer.academy/playbooks/ai-portfolio-fuer-den-job) [71. Proving your AI skills credibly in CV and interview](https://studiomeyer.academy/playbooks/ai-skills-belegen-lebenslauf-interview) [72. Effort levels in Claude Code, when low is enough and when you need max](https://studiomeyer.academy/playbooks/effort-level-in-claude-code-einstellen) [73. From Academy skill to your first paid AI gig](https://studiomeyer.academy/playbooks/erster-bezahlter-ki-auftrag) [74. Fact-checking an AI answer: 10 steps against wrong information](https://studiomeyer.academy/playbooks/ki-antwort-faktenchecken) [75. AI images for your brand, from first prompt to finished set](https://studiomeyer.academy/playbooks/ki-bilder-fuer-deine-marke) [76. AI for freelancers, writing quotes and client emails in half the time](https://studiomeyer.academy/playbooks/ki-fuer-selbststaendige-angebote-und-mails) [77. Spotting and correctly labelling AI content](https://studiomeyer.academy/playbooks/ki-inhalte-erkennen-und-kennzeichnen) [78. AI meeting notes that are actually usable](https://studiomeyer.academy/playbooks/ki-notizen-fuer-meetings) [79. Local AI on your own machine, so your data never leaves the house](https://studiomeyer.academy/playbooks/lokale-ki-auf-dem-eigenen-rechner) [80. Understanding the three MCP primitives. Tools, Resources and Prompts](https://studiomeyer.academy/playbooks/mcp-primitives-tools-resources-prompts) [81. Reliable JSON from any AI, so your automation doesn't break](https://studiomeyer.academy/playbooks/verlaessliches-json-aus-ai) [82. What AI tools really cost, and where the hidden bills hide](https://studiomeyer.academy/playbooks/was-kostet-ki-wirklich) [83. Understanding prompt injection, the three traps when your AI assistant reads foreign text](https://studiomeyer.academy/playbooks/prompt-injection-erkennen) [84. Protecting yourself from AI fraud, fake calls, phishing and bogus job offers](https://studiomeyer.academy/playbooks/dich-vor-ki-betrug-schuetzen) [85. Opus 5 migration, when thinking becomes the default](https://studiomeyer.academy/playbooks/opus-5-migration) [86. The AI policy for small teams, on a single page](https://studiomeyer.academy/playbooks/ki-richtlinie-fuer-kleine-teams) [87. Stopping agents that drift off course](https://studiomeyer.academy/playbooks/agenten-die-abdriften-stoppen) [88. Seeing what your agent actually did, tracing in 10 steps with OpenTelemetry](https://studiomeyer.academy/playbooks/agent-tracing-mit-opentelemetry) [89. Having AI summarize long documents without it inventing things](https://studiomeyer.academy/playbooks/lange-dokumente-sicher-zusammenfassen) [90. Vetting third-party MCP servers safely before you install them](https://studiomeyer.academy/playbooks/fremde-mcp-server-sicher-pruefen) [91. AI as a learning coach: teaching yourself a new field for a career change](https://studiomeyer.academy/playbooks/ki-lern-coach-berufswechsel) [92. The AI operator job: what do you actually do?](https://studiomeyer.academy/playbooks/berufsbild-ai-operator) [93. Using AI without losing your own edge](https://studiomeyer.academy/playbooks/ki-nutzen-ohne-selbst-zu-verlernen) [94. Why your screenshot shrinks, and how to control it](https://studiomeyer.academy/playbooks/bilder-und-screenshots-an-die-ki-geben) [95. Framing a deep research brief so the report is actually worth something](https://studiomeyer.academy/playbooks/deep-research-auftrag-formulieren) [96. Analysing numbers and tables with AI without ending up with nonsense](https://studiomeyer.academy/playbooks/zahlen-und-tabellen-mit-ki-auswerten) [97. Reading AI benchmarks without being taken for a ride](https://studiomeyer.academy/playbooks/ki-benchmarks-richtig-lesen) [98. AI as a sparring partner, better decisions instead of polite agreement](https://studiomeyer.academy/playbooks/ki-als-sparringspartner-fuer-entscheidungen) [99. Learning a new skill with AI, the honest way](https://studiomeyer.academy/playbooks/mit-ki-neue-faehigkeit-lernen) [100. Changing your MCP server without breaking your users](https://studiomeyer.academy/playbooks/mcp-server-aendern-ohne-nutzer-zu-brechen) [101. Your first local AI model in 30 minutes](https://studiomeyer.academy/playbooks/erstes-lokales-modell-in-30-minuten) [102. Which local model fits your hardware](https://studiomeyer.academy/playbooks/welches-lokale-modell-passt-zu-deiner-hardware) [103. Local AI and the GDPR, what it really solves and what it does not](https://studiomeyer.academy/playbooks/lokale-ki-und-die-dsgvo) [104. MCP with local models, tools without the cloud](https://studiomeyer.academy/playbooks/mcp-mit-lokalen-modellen) [105. Local or cloud, the honest arithmetic](https://studiomeyer.academy/playbooks/lokal-oder-cloud-die-ehrliche-rechnung) [106. When a stranger's repo configures your AI. The ChainDrop case](https://studiomeyer.academy/playbooks/agent-konfiguration-als-angriffsweg) [107. Transcribing conversations offline, without them leaving the building](https://studiomeyer.academy/playbooks/gespraeche-offline-transkribieren) [108. Connecting n8n to a local model](https://studiomeyer.academy/playbooks/n8n-mit-lokalem-modell-verbinden) [109. Reading documents offline when the scan must not be uploaded](https://studiomeyer.academy/playbooks/dokumente-offline-auslesen) [→ Zur Academy](https://studiomeyer.academy/levels/1)

## Sitemap

Public pages of this site as Markdown: [sitemap](https://studiomeyer.academy/sitemap.md). Curated entry point: [llms.txt](https://studiomeyer.academy/llms.txt), full text: [llms-full.txt](https://studiomeyer.academy/llms-full.txt).