A consumer device associated with a user of a multi-user computing system, said consumer device comprising a trusted execution environment, TEE that is provided by microcode enforced thread and memory access isolation, said consumer device further comprising secure storage accessible from within the TEE, wherein a consumer information management, CIM, device is implemented in the TEE and wherein the CIM device comprises: notification receipt logic to receive a notification, from a dimension authority device distinct from the consumer device, of a decrease in a population count of users of the computing system who have published an attribute within the computing system, wherein a user has published an attribute when the attribute is included in a set of public attributes associated with the user; public profile logic, operatively coupled with the notification receipt logic, to determine whether the user has published the attribute; risk analysis logic, operatively coupled with the notification receipt logic and the public profile logic, to, in response to the receipt of a notification of a decrease in the population count of users and the determination that the user has published the attribute, determine a value representative of a likelihood that continued publication of the attribute will enable identification of the user; user privacy logic, operatively coupled with the risk analysis logic, to compare the value representative of the likelihood to a threshold; and profile change logic, operatively coupled with the user privacy logic and the public profile logic, to, when the value representative of the likelihood exceeds the threshold, remove the attribute from publication in the set of public attributes that are accessible by other entities in the system automatically and/or upon request, wherein the consumer information management device is configured to: authenticate to the dimension authority device by means of an enhanced privacy identifier, EPID, private key provisioned to the consumer device during manufacture, wherein the EPID private key is stored in the secure storage and wherein a single EPID public key is configured to facilitate verification of multiple corresponding EPID private keys, and obtain, by a sign and mac, SIGMA, exchange with the dimension authority device, one or more dimension keys from the dimension authority device, so as to enable the consumer device to sign to-be-disclosed dimension attributes with the one or more dimension keys. notification receipt logic to receive a notification, from a dimension authority device distinct from the consumer device, of a decrease in a population count of users of the computing system who have published an attribute within the computing system, wherein a user has published an attribute when the attribute is included in a set of public attributes associated with the user; public profile logic, operatively coupled with the notification receipt logic, to determine whether the user has published the attribute; risk analysis logic, operatively coupled with the notification receipt logic and the public profile logic, to, in response to the receipt of a notification of a decrease in the population count of users and the determination that the user has published the attribute, determine a value representative of a likelihood that continued publication of the attribute will enable identification of the user; user privacy logic, operatively coupled with the risk analysis logic, to compare the value representative of the likelihood to a threshold; and profile change logic, operatively coupled with the user privacy logic and the public profile logic, to, when the value representative of the likelihood exceeds the threshold, remove the attribute from publication in the set of public attributes that are accessible by other entities in the system automatically and/or upon request, wherein the consumer information management device is configured to: authenticate to the dimension authority device by means of an enhanced privacy identifier, EPID, private key provisioned to the consumer device during manufacture, wherein the EPID private key is stored in the secure storage and wherein a single EPID public key is configured to facilitate verification of multiple corresponding EPID private keys, and obtain, by a sign and mac, SIGMA, exchange with the dimension authority device, one or more dimension keys from the dimension authority device, so as to enable the consumer device to sign to-be-disclosed dimension attributes with the one or more dimension keys. authenticate to the dimension authority device by means of an enhanced privacy identifier, EPID, private key provisioned to the consumer device during manufacture, wherein the EPID private key is stored in the secure storage and wherein a single EPID public key is configured to facilitate verification of multiple corresponding EPID private keys, and obtain, by a sign and mac, SIGMA, exchange with the dimension authority device, one or more dimension keys from the dimension authority device, so as to enable the consumer device to sign to-be-disclosed dimension attributes with the one or more dimension keys.