Computer systems that store and manage information about individuals often face challenges with privacy rules. Such rules go beyond basic technologies like encryption and access control to encompass a rich collection of considerations where the subject of a piece of information must be given some say over how the holder of the information may use and distribute it. This project looks at ways to express these rules more formally to help capture privacy requirements and prove that privacy systems conform to them. It also considers more systematic ways to learn privacy attitudes and how to apply this information to designing computer systems that manage privacy risk.