Consumer privacy at risk