Measure-Observe-Remeasure: An Interactive Paradigm for Differentially-Private Exploratory Analysis

arXiv:2406.01964v1 Announce Type: new
Abstract: Differential privacy (DP) has the potential to enable privacy-preserving analysis on sensitive data, but requires analysts to judiciously spend a limited ``privacy loss budget'' $\epsilon$ across queries. Analysts conducting exploratory analyses do not, however, know all queries in advance and seldom have DP expertise. Thus, they are limited in their ability to specify $\epsilon$ allotments across queries prior to an analysis. To support analysts in spending $\epsilon$ efficiently, we propose a new interactive …

analysis analysts arxiv budget cs.cr cs.db cs.hc data differential privacy enable epsilon expertise loss measure observe paradigm privacy private sensitive sensitive data