An embedded universal integrated circuit card (eUICC) configured to control and enforce policy rules includes a policy rule storage configured to define actions and conditions required to enforce a plurality of policies and store a plurality of policy rules; a policy controller configured to control the plurality of policy rules; and a policy enforcer configured to enforce the plurality of policy rules. The policy is a principle reflecting rules for controlling the eUICC and an external entity remotely managing the eUICC. The plurality of policy rules includes a first type of policy rules and a second type of policy rules, the first type of policy rules and the second type of policy rules being managed in physically different places.