This article argues that privacy and data protection theory and law should get rid of its fixation on "personal information". Based on a historical analysis of this fixation, its shortcomings are illustrated. The article proposes to focus on "person-related decision" as a new basic building block for privacy and data protection theory and law.
