Statistical privacy