The aim of the work is to analyze personal data processing in the private sphere in order to illuminate challenges and solutions for complying with the legal prerequisites of the German and European data protection laws with a view toward preserving individual autonomy It is questionable whether civil liability for data protection is still based on its original procedural structure Analyzes the proposed new European general data protection regulation Examines specific risk situations in private data processing Strong practical relevance