Mixed reality technologies offer far-reaching opportunities for innovative and immersive services for end users in various areas such as healthcare, training and education as well as entertainment. However, these services rely on large amounts of sensitive, personal data. Currently, there are no mechanisms and general principles available that allow users to effectively take control of their sensitive data without having to opt out of the associated services.