Setting the Privacy Budget in Differential Privacy by Bounding Adversaries' Odds of Learning Sensitive Information

Differential privacy is a mathematical definition of what it means to protect data subjects' privacy in data releases.

Differential privacy depends on a parameter $\epsilon$ known as the privacy budget.

The value of $\varepsilon$ determines the nature of the privacy guarantee, with smaller values generally offering more privacy.

However, reducing $\varepsilon$ also tends to decrease the accuracy of results protected with differentially private algorithms.

Setting a value for $\varepsilon$ that satisfactorily balances this risk/accuracy trade off is complicated in practice, and there is not a standard approach to doing so.

In part this is because practitioners may struggle to understand the privacy guarantee afforded by $\varepsilon$.

We present an approach to interpreting and setting $\varepsilon$ in which (i) the practitioner establishes bounds on the posterior odds that adversaries can learn sensitive information, and (ii) the practitioner converts these bounds to values of $\varepsilon$.

We illustrate the approach using data from a case control study.