With the increasing amount of data collected by service providers, privacy concerns increase for data owners who must provide private data to receive services. Legislative acts require the service providers to protect the privacy of customers. Privacy policy frameworks such as P3P assist them by describing their privacy policies to customers (e.g. publishing privacy policy on websites). However, describing the policies alone does not guarantee that they are actually enforced, since privacy is not central to conventional access control models. A privacy-preserving model should consider the privacy preferences of both data provider and collector. This talk presents a detail study on a Lattice-based Privacy Aware Access Control (LPAAC) Model that enforces privacy policies, facilitates customization of privacy agreements and accommodates preferences of both data and service providers. We also demonstrate the semantics of our model and its feasibility with corresponding privacy catalogues. Examples clarify the usability, and we provide experimental results of the implementation of our privacy catalogues that show the efficiency and scalability of our model.