Brownian Noise Reduction: Maximizing Privacy Subject to Accuracy Constraints