The new book Data Protection on the Move that is now available from Springer contains a paper which I have written with colleagues from the Forum Privacy: Carsten Ochs, Philipp K. Masur and Thilo von Pape. In “DIY Data Protection — Empowerment or Burden?” we discuss both empirically and normatively how much responsibility for data protection can and should rest on the individual. In particular we point out the dangers of a perspective on data protection that just asks what the citizens can do rather than taking into account the role of states and companies.