An approach is provided for processing sensor data to determine an identification of at least one object. The approach involves determining brain wave data associated with at least one user during an exposure of the at least one object to at least one user. The approach also involves processing the brain wave information to determine a sensitivity information of the at least one user to the at least one object. The approach further involves causing a configuration of one or more privacy policies of at least one device based, at least in part, on the sensitivity information.