1. A device comprising: an anonymization module operable to produce in response to an anonymization policy an anonymized image by causing a reduction in fidelity of a feature of a subject depicted in a received image; and a communications module operable to send a signal indicative of the anonymization policy.