Unit of privacy: how many records one entity contributes

Differential privacy protects a UNIT, and the unit is a choice. Sensitivity computed per row protects a row; if one person supplies twenty rows, their protection is twenty times weaker than the stated epsilon suggests.

Usage

morie_dp_unit_definition(records, unit = NULL)

Arguments

records

vector of unit identifiers, one entry per record.

unit

optional identifier whose own contribution to report.

Value

list with n_records, n_units, max_contribution, sensitivity_multiplier, contributions.

Details

This function counts contributions per unit and reports the multiplier the sensitivity must carry – or, equivalently, the cap that must be imposed on contributions before the query is run.

References

Dwork, C. and Roth, A. (2014). FnTTCS, 9(3-4), Sec. 2.3 (group privacy).

Examples

morie_dp_unit_definition(c(1, 1, 2, 3, 3, 3))$sensitivity_multiplier
#> [1] 3