Multi-step Jailbreaking Privacy Attacks on ChatGPT