This paper seeks to understand the nature of harm emerging from personal data processing activities and its impact on user protection. To this end, the paper analyses how personal data-related harms are unique and distinct from other kinds of harms arising from torts, breach of contract, crime or defects in products and services.