The book argues that, while privacy and data protection law are implicitly grounded on concepts from bilateral agreements with others, in light of AI harms we need to instead ground them on concepts from civil responsibility, which set the rules for harms caused to others. It proposes a plan to build accountability into the information economy for individual and group AI harms that departs from current regulations and proposals.