Defining responsibility online – and how to enforce it