enum hci_conn_flags {
        HCI_CONN_FLAG_REMOTE_WAKEUP,
+       HCI_CONN_FLAG_DEVICE_PRIVACY,
 
        __HCI_CONN_NUM_FLAGS,
 };
 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
                             hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
 
+#define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
+                                  (hdev->commands[39] & 0x04))
+
 /* Use enhanced synchronous connection if command is supported */
 #define enhanced_sco_capable(dev) ((dev)->commands[29] & 0x08)
 
 
        memcpy(ev.uuid, rpa_resolution_uuid, 16);
        ev.flags = cpu_to_le32((enabled ? BIT(0) : 0) | BIT(1));
 
+       if (enabled && privacy_mode_capable(hdev))
+               set_bit(HCI_CONN_FLAG_DEVICE_PRIVACY, hdev->conn_flags);
+       else
+               clear_bit(HCI_CONN_FLAG_DEVICE_PRIVACY, hdev->conn_flags);
+
        return mgmt_limited_event(MGMT_EV_EXP_FEATURE_CHANGED, hdev,
                                  &ev, sizeof(ev),
                                  HCI_MGMT_EXP_FEATURE_EVENTS, skip);
                if (params) {
                        bitmap_from_u64(params->flags, current_flags);
                        status = MGMT_STATUS_SUCCESS;
+
+                       /* Update passive scan if HCI_CONN_FLAG_DEVICE_PRIVACY
+                        * has been set.
+                        */
+                       if (test_bit(HCI_CONN_FLAG_DEVICE_PRIVACY,
+                                    params->flags))
+                               hci_update_passive_scan(hdev);
                } else {
                        bt_dev_warn(hdev, "No such LE device %pMR (0x%x)",
                                    &cp->addr.bdaddr,