The Problem of Quantifying Privacy Risk