Method and system for controlling the exchange of Privacy-Sensitive Information