instructions by p and or some applicable regulations for instance r may seek credit information about p possibly offering some services to p only if p agrees on r collecting such data which may or may not need to be disclosed to p according to regulation and the contract between r and p actualization system 18 handles situations when p 39 s data is updated and or authorization needs to be given to r by p to continue to keep p 39 s data after they are updated for instance r may collect data from public sources to provide an updated valuation of the credit rating of p or r may need re validation by p e g every year every six months or even of its right to keep any data about p in addition to the scenario described above the case is addressed where p and or r want to provide data to a third party t that guarantees some privacy policy in a typical scenario the third party is a merchant m and the user p is a purchaser however it should be understood that this embodiment could apply to any situation where a user needs to provide data directly to some other entity in order to provide a secure and guaranteed privacy policy all communication of data to the merchant m by p should be done through a secure hardware device of the merchant such as the 4758 or similar machine furthermore m may be required to guarantee that the data about p will stay protected according to rules that m describes or to rules that m accepts from p or r using a 4758 or similar hardware device that prevents.