Personal data have become merchandisable asset encouraging stakeholders to collect and trade them without end-user's awareness and acceptance. Although EU is adapting the legal framework, the extent of applications most of which are developed from outside the EU jurisdiction, strongly limit the possibility to effectively impose a privacy-protection framework globally. The Privacy Rag project researches and combines the potential of crowds ourcing, ICT technologies and legal expertise for enabling citizens monitoring and controlling their privacy1.