Understanding business models that treat citizens’ personal data as the online platforms’ new business asset class, is key to helping users maintain their online privacy. Never before has it been as easy for software organizations to collect and link personal data across hundreds of daily user transactions. In this talk we review online platforms’ business models, recent guidelines for privacy governance for software organizations, and emerging guidelines at the level of the UML modeling standard in the software development process.