A method is presented for processing data for a privacy policy concerning
management of personally identifiable information. A proxy intercepts a
first message from a server to a client and determines that the first
message initiates collection of personally identifiable information from
a user of the client. The proxy then sends a second message to the client
that requests consent from the user to the privacy policy. If the user
provides consent within a third message that is received by the proxy
from the client, then the proxy sends the intercepted first message to
the client. If the user does not provide consent, then the proxy sends a
fourth message to the server that fails the collection of personally
identifiable information from the client by the server. The proxy may
also obtain user preferences for options concerning management of the
personally identifiable information by a data processing system.