privacy risk monitoring