Guarantees of confidentiality via Hammersley-Chapman-Robbins bounds