This paper presents a privacy-preserving identity management system, referred to as Pima. The proposed system is built over a novel unlinkable malleable signature scheme, called . Pima supports pseudonymity, as it is more in line with today’s web service interactions than anonymity. The originality of the approach is manifold. First, Pima satisfies both users’ and providers’ basic security and privacy needs as it provides a user centric approach which permits the users to keep control over their revealed attributes, and the service providers to get attributes certified by an identity provider and associated with different pseudonymous sessions. Second, Pima helps service providers to comply with the data minimization principle required by the E.U. General Data Protection Regulation, through the enforcement of both sanitizable and redactable features. Third, the proposed signature scheme fulfills main security and strong privacy requirements at a constant pairing computation overhead. Fourth, Pima’s concrete construction is proven as secure under the generic group model. Fifth, the implementation results demonstrate high efficiency w.r.t. most closely related work, while considering resource-constrained devices, i.e., Android-10 smartphone.