1. A system comprising: an identity manager to manage a plurality of user identities and to determine whether any user identity satisfies security policy requirements; storage including at least one privacy preference relative to at least one user identity; an editor, responsive to user selections indicating at least one preference-related input relating to the at least one user identity, the editor to: generate at least one privacy preference using the user selections wherein the user identity is represented by at least one information card used in completing an online transaction with a relying party; and determine a privacy preference for each category; and an engine, operatively connected to the storage, the engine configured to perform the evaluation using the at least one privacy preference of any category referencing at least one required attribute; a host computer to evaluate the at least one privacy preference against a privacy policy associated with the online transaction and obtained from the relying party; wherein when the identity manager determines the user identity satisfies the security policy; wherein the host computer provides the at least one information card representing the user identity to the relying party.