"In circumstances in which there is a risk that personally identifiable information may be disclosed, we will warn our users." . . . .