Method for control of personal data

A communication system for end user controlled handling of personal data including an application unit with a first access means arranged to communicate with a data providing unit and a service broker, said system comprising:

• means for transmitting a description of a web service from the data providing unit to the service broker;
• means for publishing, at the service broker, web service information associated with the web service description;
• means for communicating, based on a predefined web service protocol, a service request from an application node of the application unit to the service broker via the first access means;
• and
• means for returning, based on the predefined web service protocol, an end user controlled privacy agreement for the requested service from the service broker to the application unit.

An intermediate device belonging to an application unit in a communication system for end user controlled handling of personal data, arranged adapted to communicate with a data providing unit and a service broker of the communication system and comprising:

• means for receiving a SOAP request message with a service request from an application node of the application unit;
• means for communicating the service request to the service broker using SOAP;
• means for receiving, from the service broker, a privacy agreement corresponding to the service request;
• means for creating an encapsulated SOAP message based on the SOAP request message and the privacy agreement;
• and
• means for transmitting the encapsulated SOAP message to the data providing unit.