Abstract: Techniques for generating and implementing data privacy policies are described. In an example, metadata associated with a data source is annotated with attributes indicative of the data contained therein and its associated sensitivity. Based on the annotated metadata and the contexts in which the data will be accessed, including the purpose for accessing the data, the role of the accessor, and the location of the accessor, privacy policies are generated from a privacy model. The privacy policies are generated with a collection of methods for protecting the data in the data source upon access. Based on a privacy policy and a target computing environment, an executable instance of the privacy policy is generated and deployed in the target computing environment to protect the data.