Journal of Information Security Research Han Wang, Ling Zhang 7 2 2016 A critical challenge for privacy preserving is to enable internet users to exert some control over their personal data and meet the needs of websites to use personal data in reasonable business procedures. Privacy problem is becoming rather serious in an increasingly digital society especially for countries where necessary legal and regulation systems for personal data protection have not been well established. Thus we presented PSP (Privacy Service Provider) mechanism as an adjunct. Different from legislation and self-regulation which protect privacy by passively restricting the collection and usage of personal data, PSP protects privacy by actively providing personal data management and usage services. Internet users store their personal data in PSP and fulfill basic management like modification and access control. Instead of collecting personal data themselves, websites could get access to the personal data usage services provided by PSP including user authentication, advertising, and data analysis. Any processing on users’ privacy data will be recorded for feedback service. The design model of PSP was analyzed as well as the possible implementation of services provided to both internet users and websites.