The issue of user privacy is constantly brought to the spotlight since an ever increasing number of online services collect and process personal information from users, in the context of personalized service provisioning. This issue is emphasized in the identity management systems where user identities and profiles are valuable assets. Existing privacy legislative laws have to be brought down to the electronic world reality to limit the disclosure of personal data and avoid their misuse. This paper defines a privacy module for user’s devices to automatically enforce privacy protection in identity management environments