Huge amount of digital information is collected and utilized in the digital society through internet shopping, IC card, IC tag, etc. It is also used for customer relationship management (CRM). However consumers usually do not know what kind of personal data is collected and circulated among corporations. Furthermore they are not allowed to control the collection and circulation of such information to the corporations they do not trust. In this paper, we propose a personal data control mechanism in order to overcome such limitations and to develop better relationship between consumers and corporations.