Fuzzy-based approach to assess and prioritize privacy risks