An apparatus, program product and method assess a spam risk associated with submission of a user's private information to an entity such as a web site. For example, the spam risk associated with an entity accessible over an electronic communications medium may be assessed by monitoring an account of a user for receipt of unsolicited communications from the entity in response to the user submitting private information solicited by the entity, and determining a spam risk for the entity based upon the monitoring.