Patent attributes
In the setting of policies for personal data, instructions originating from a primary user and defining a privacy policy for a selected piece of personal data are communicated, via an application unit (220), to a privacy-setting node (258) of a service broker (250). The instruction define possible data providers (240) for the data. The policy is stored at a database (254) in a privacy tree for the primary user comprising hierarchically arranged personal data with associated policies. Upon receiving a request for the personal data, the privacy-setting node determines whether there is a privacy policy defined from the data by checking the privacy tree of the primary user. If there is a policy for a requested data, it selects a data provider among the possible data providers and returns a response to the application unit, providing access to the requested personal data at this provider.