Using fake personal data to create a policy to protect personal information on client computing devices

A system comprising a client computing device with at least one processor and memory and instructions that, when executed by the at least one processor, cause a policy management module on the client computing device to:

• identify personal data associated with the client computing device;
• receive, from a server, an analysis associated with the client computing device, wherein the analysis is generated by a server that:
• creates a set of fake personal data;
• transmits the fake personal data to the client computing device;
• tracks access of the fake personal data by an application installed on the client computing device;
• and
• identifies the application that accessed the fake personal data;
• receive at the client computing device, from the server, a policy to disallow the access of personal data by the identified application on the client computing device, the policy being created by the server and assigned to the client computing device;
• and,
• generate a report by the server to alert a user of the client computing device, the alert including access of fake personal data by the application.