Disclosure of personal information under the risk of privacy shocks