During the whole life-cycle of IT services privacy as expressed by user requirements and data protection legislation should be respected. There are several existing assessments for the assurance of privacy requirements in IT services. Other approaches like privacy protection goals allow already the integration in the design of a service. However, unlike information security, privacy is not incorporated in the best practice process reference models that are used to manage the life-cycle of IT services. In this paper widely-used process reference models CMMI and ITIL are analysed. It is investigated for these reference models to what extent privacy is already incorporated and what existing approaches could be recommended otherwise.