We present a way of incorporating a decentralized label model into the UML by defining a profile which is the built-in extension mechanism of the UML. Our profile permits specifying confidentiality of data in UML by offering annotations for classes, attributes, operations, values of objects, and parameters of operations. The profile also supports generation of Jif (Java information flow) code and the Jif compiler guarantees that the specified confidentiality constraints are not violated. Our approach is appealing in the sense that it offers the possibility to consider confidentiality in UML and that the obtained code is guaranteed to behave correctly.