In SocioPlug, we have particular concerns about data protection. Services proposed by SocioPlug will conform to European regulations, during personal data collection and data access. In particular the right to oblivion, collection and access purposes should be explicitly determined by data owners. SocioPlug’s architecture is fully distributed and has no centralized server, thereafter, there is no centralized control about data and applications of users. The goal is to avoid the existence of a “big brother” vigilating every person of the social cloud. Nevertheless, collaboration implies accessing personal data of other users. As services and data will be distributed in a social cloud, participants must be responsible of their data but also of other’s data they collect and use. Thus, they must define usage policies for each shared data and people that collects and uses other’s data must preserve stated policies. From application scenarios described in deliverable D.4.1, in this report, we identify some important privacy breach scenarios that may appear in SocioPlug.