Abstract— A location tracking sensor network is being deployed in several buildings at the University of Michigan to help explore issues in design of pervasive environments. Managing privacy is expected to be a significant concern for acceptance of such pervasive environments. This paper outlines an initial design of a publish-subscribe communication substrate for controlled distribution of sensor data. We describe our prototype as well as a privacy-aware locationtracking application built on top of the system. The focus of this paper is on policy management. We provide users with the means to control distribution of data about them (such as their location information) through the use of privacy policies. The paper shows how a wide variety of policies can be specified in the system and points out directions for future work.