In a privacy management environment, an individual or organization, or an agent acting on behalf of an individual or organization, that collects privacy-sensitive information from a PII owner and then uses that information in accordance with the privacy policies. See also PII owner.