Theoretical privacy risk analysis