4 ms·
> The amount of information revealed from each query is calculated and deducted from an overall privacy budget to halt additional queries this is why DP doesn'
by awinter-py 6y ago
> The amount of information revealed from each query is calculated and deducted from an overall privacy budget to halt additional queries
this is why DP doesn't get used in any real system -- limited # of searches is a deal breaker for any service that wants to monetize
there are some applications where this could be okay, like in-company surveys where you want to enable employees to run stats queries without revealing individuals, but companies are (relatively) high trust environments and DP is overkill
- ghaff 6y ago>this is why DP doesn't get used in any real system It was used for the 2020 US Census. There are some techniques like exposing randomized subsets for a limited number of queries.
- awinter-py 6y ago!! didn't know that how is access to the privacy prioritized?
- ghaff 6y agoI haven't studied the Census' approach in detail but they have a fair bit of information online, e.g. https://www.census.gov/about/policies/privacy/statistical_safeguards/disclosure-avoidance-2020-census.html https://www.census.gov/about/policies/privacy/statistical_sa...
- 16bytes 6y agoDP is used in many large-scale production systems. For example, Google used it in their COVID-19 mobility reports [1]. Also, there are implementations of DP that do not rely on limiting queries. Lastly, most companies aren't "high trust" environments. There are tons of stories about employees routinely abuse their company's data. Companies with any sensitive data should be looking at DP and other anonymization techniques even if their data is only ever shown to their employees. [1] https://www.google.com/covid19/mobility/ https://www.google.com/covid19/mobility/