privacy risk exposure