The aim of the work is to analyze personal data processing in the private sphere in order to illuminate challenges and solutions for complying with the legal prerequisites of the German and European data protection laws – with a view toward preserving individual autonomy. It is questionable whether civil liability for data protection is still based on its original procedural structure.