The invention provides a privacy risk assessment method and device for user generated content (UGC). The method comprises following steps: obtaining forwarding data, wherein the forwarding data comprises data about the UGC and the personal information of the user releasing the UGC; analyzing the forwarding data to obtain a corresponding weight for each of the plurality of sensitive information elements of the UGC and the user for privacy risk assessment, and an existence factor indicating whether or not each of the plurality of sensitive information elements is included in the UGC when it is forwarded; and assessing the privacy risk based on the analysis. Thereby, users will know the privacy risk assessment results of the UGC so that they can update or delete some information to avoid the privacy of information disclosure and the negative consequences.