Differential privacy allows quantifying privacy loss resulting from accessing sensitive personal data. Repeated accesses to underlying data incur increasing loss. Releasing data as privacy-preserving synthetic data would avoid this limitation, but would leave open the problem of designing what kind of synthetic data. We propose formulating the problem of private data release through probabilistic modelling. This approach transforms the problem of designing the synthetic data into choosing a model for the data, allowing also including prior knowledge, which improves the quality of the synthetic data. We demonstrate empirically, in an epidemiological study, that statistical discoveries can be reliably reproduced from the synthetic data. We expect the method to have broad use in creating high-quality anonymized data twins of key data sets for research.
翻译:不同的隐私允许对获取敏感个人数据造成的隐私损失进行量化。反复获取基本数据会造成越来越多的损失。将数据作为保护隐私的合成数据释放,可以避免这一限制,但会留下设计何种合成数据的问题。我们提议通过概率模型来拟订私人数据释放的问题。这种方法将合成数据的设计问题转变为选择数据模型的问题,也允许包括先前的知识,从而提高合成数据的质量。我们在流行病学研究中以经验证明,从合成数据中可靠地复制统计发现。我们期望这种方法能够广泛用于为研究创造关键数据集的高质量匿名双元数据。