Fingerprinting Codes and the Price of Approximate Differential Privacy
Not on the map. Why?
Abstract (arXiv)
We show new lower bounds on the sample complexity of (varepsilon, δ)-differentially private algorithms that accurately answer large sets of counting queries. A counting query on a database D ∈ (0,1d)n has the form "What fraction of the individual records in the database satisfy the property q?" We show that in order to answer an arbitrary set Q of gg nd counting queries on D to within error ± α it is necessary that n ≥ tildeOmegaBigg(frac√d log |Q|α2 varepsilon Bigg). This bound is optimal up to poly-logarithmic factors, as demonstrated by the Private Multiplicative Weights algorithm (Hardt and Rothblum, FOCS'10). In particular, our lower bound is the first to show that the sample complexity required for accuracy and (varepsilon, δ)-differential privacy is asymptotically larger than what is required merely for accuracy, which is O(log |Q| / α2). In addition, we show that our lower bound holds for the specific case of k-way marginal queries (where |Q| = 2k binomdk) when α is not too small compared to d (e.g. when α is any fixed constant). Our results rely on the existence of short fingerprinting codes (Boneh and Shaw, CRYPTO'95, Tardos, STOC'03), which we show are closely connected to the sample complexity of differentially private data release. We also give a new method for combining certain types of sample complexity lower bounds into stronger lower bounds.
Key facts. Cited by 81 papers in the map (data through 7 Oct 2026). First posted on arXiv 13 Nov 2013.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 18; 2022: 16; 2023: 18; 2024: 14; 2025: 7; 2026: 8.
81 papers.
Sort:
By area:
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2021Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Datacited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2023Stability is Stable: Connections between Replicability, Privacy, and Adaptive Generalizationcited by 42
- 2021Leveraging Public Data for Practical Private Query Releasecited by 39
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
38 more
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
- 2022On the Impossible Safety of Large AI Modelscited by 27
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2023Score Attack: A Lower Bound Technique for Optimal Differentially Private Learningcited by 21
- 2023Unleashing the Power of Randomization in Auditing Differentially Private MLcited by 19
- 2022Private Online Prediction from Experts: Separations and Faster Ratescited by 17
- 2021Privately Learning Subspacescited by 16
- 2021Differential Privacy Over Riemannian Manifoldscited by 16
- 2023Information Theoretic Lower Bounds for Information Theoretic Upper Boundscited by 16
- 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimationcited by 16
- 2022Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inferencecited by 14
- 2024Differentially Private Zeroth-Order Methods for Scalable Large Language Model Finetuningcited by 14
- 2021Privately Learning Mixtures of Axis-Aligned Gaussianscited by 13
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimationcited by 12
- 2024Information Complexity of Stochastic Convex Optimization: Applications to Generalization and Memorizationcited by 12
- 2021Private learning implies quantum stabilitycited by 10
- 2021Differentially Private Coordinate Descent for Composite Empirical Risk Minimizationcited by 10
- 2022Privacy-Preserving Models for Legal Natural Language Processingcited by 10
- 2023Concentrated Differential Privacy for Banditscited by 10
- 2024How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimizationcited by 10
- 2025Fed-SB: A Silver Bullet for Extreme Communication Efficiency and Performance in (Private) Federated LoRA Fine-Tuningcited by 10
- 2022Adaptive Data Analysis with Correlated Observationscited by 9
- 2023On Differential Privacy and Adaptive Data Analysis with Bounded Spacecited by 9
- 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimescited by 9
- 2024DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptationcited by 9
- 2022How to Combine Membership-Inference Attacks on Multiple Updated Modelscited by 8
- 2022Private Query Release via the Johnson-Lindenstrauss Transformcited by 8
- 2022Differentially Private Sampling from Distributionscited by 8
- 2023Smooth Lower Bounds for Differentially Private Algorithms via Padding-and-Permuting Fingerprinting Codescited by 8
- 2021A Central Limit Theorem for Differentially Private Query Answeringcited by 7
- 2022Instance-Optimal Differentially Private Estimationcited by 7
- 2024Mirror Descent Algorithms with Nearly Dimension-Independent Rates for Differentially-Private Stochastic Saddle-Point Problemscited by 7
- 2024Optimal Federated Learning for Nonparametric Regression with Heterogeneous Distributed Differential Privacy Constraintscited by 7
- 2024Dimension-free Private Mean Estimation for Anisotropic Distributionscited by 6
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributionscited by 5
- 2023On the Benefits of Public Representations for Private Transfer Learning under Distribution Shiftcited by 5
- 2024Public-data Assisted Private Stochastic Optimization: Power and Limitationscited by 5
50 most cited of 81 All 81 (JSON)
- 2026Performative Privacy: When Differential Privacy Maximizes Utility28 Aug 2026
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspective14 Jul 2026
- 2026Near-optimal node-private community estimation in polynomial-time10 Jul 2026
- 2026On the Curse of Dimensionality in Private Sparse Covariance Estimation and PCA20 Jun 2026
- 2026A Van Trees Lower Bound for Fully Interactive Differentially Private Federated Learning19 May 2026
- 2026Integrating Feature Correlation in Differential Privacy with Applications in DP-ERM5 May 2026
- 2026On the Price of Privacy for Language Identification and Generation8 Apr 2026
- 2026Minimax optimal differentially private synthetic data for smooth queries2 Feb 2026
- 2025On the Gradient Complexity of Private Optimization with Private Oracles17 Nov 2025
- 2025Lower Bounds for Public-Private Learning under Distribution Shift23 Jul 2025
- 2025Optimal Differentially Private Ranking from Pairwise Comparisons12 Jul 2025
- 2025Bayesian Perspective on Memorization and Reconstruction29 May 2025
38 more
- 2025Purifying Approximate Differential Privacy with Randomized Post-processing27 Mar 2025
- 2025Fed-SB: A Silver Bullet for Extreme Communication Efficiency and Performance in (Private) Federated LoRA Fine-Tuning21 Feb 2025
- 2025On Theoretical Limits of Learning with Label Differential Privacy20 Feb 2025
- 2024Fingerprinting Codes Meet Geometry: Improved Lower Bounds for Private Query Release and Adaptive Data Analysis18 Dec 2024
- 2024Sample-Efficient Private Learning of Mixtures of Gaussians4 Nov 2024
- 2024Dimension-free Private Mean Estimation for Anisotropic Distributions1 Nov 2024
- 2024Agnostic Private Density Estimation for GMMs via List Global Stability5 Jul 2024
- 2024Optimal Federated Learning for Nonparametric Regression with Heterogeneous Distributed Differential Privacy Constraints10 Jun 2024
- 2024Auditing Privacy Mechanisms via Label Inference Attacks4 Jun 2024
- 2024DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptation10 May 2024
- 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimes26 Apr 2024
- 2024Public-data Assisted Private Stochastic Optimization: Power and Limitations6 Mar 2024
- 2024Mirror Descent Algorithms with Nearly Dimension-Independent Rates for Differentially-Private Stochastic Saddle-Point Problems5 Mar 2024
- 2024How to Make the Gradients Small Privately: Improved Rates for Differentially Private Non-Convex Optimization17 Feb 2024
- 2024Information Complexity of Stochastic Convex Optimization: Applications to Generalization and Memorization14 Feb 2024
- 2024Differentially Private Zeroth-Order Methods for Scalable Large Language Model Finetuning12 Feb 2024
- 2024On Differentially Private Subspace Estimation in a Distribution-Free Setting9 Feb 2024
- 2023On the Benefits of Public Representations for Private Transfer Learning under Distribution Shift24 Dec 2023
- 2023Differentially Private Non-Convex Optimization under the KL Condition with Optimal Rates22 Nov 2023
- 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimation10 Oct 2023
- 2023Concentrated Differential Privacy for Bandits1 Sep 2023
- 2023Smooth Lower Bounds for Differentially Private Algorithms via Padding-and-Permuting Fingerprinting Codes14 Jul 2023
- 2023Differentially private sliced inverse regression in the federated paradigm10 Jun 2023
- 2023Harnessing large-language models to generate private synthetic text2 Jun 2023
- 2023Unleashing the Power of Randomization in Auditing Differentially Private ML29 May 2023
- 2023A Polynomial Time, Pure Differentially Private Estimator for Binary Product Distributions13 Apr 2023
- 2023Stability is Stable: Connections between Replicability, Privacy, and Adaptive Generalization22 Mar 2023
- 2023Score Attack: A Lower Bound Technique for Optimal Differentially Private Learning13 Mar 2023
- 2023PRIMO: Private Regression in Multiple Outcomes7 Mar 2023
- 2023Multi-Message Shuffled Privacy in Federated Learning22 Feb 2023
- 2023On Differential Privacy and Adaptive Data Analysis with Bounded Space11 Feb 2023
- 2023Information Theoretic Lower Bounds for Information Theoretic Upper Bounds9 Feb 2023
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learning9 Feb 2023
- 2023General Gaussian Noise Mechanisms and Their Optimality for Unbiased Mean Estimation31 Jan 2023
- 2023A Bias-Accuracy-Privacy Trilemma for Statistical Estimation30 Jan 2023
- 2022Privately Estimating a Gaussian: Efficient, Robust and Optimal15 Dec 2022
- 2022Differentially Private Sampling from Distributions15 Nov 2022
- 2022Privacy-Preserving Models for Legal Natural Language Processing5 Nov 2022
50 newest of 81 All 81 (JSON)
- 2022Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inferencecited by 14
- 2022How to Combine Membership-Inference Attacks on Multiple Updated Modelscited by 8
- 2025Bayesian Perspective on Memorization and Reconstructioncited by 0
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspectivecited by 0
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspective14 Jul 2026
- 2025Bayesian Perspective on Memorization and Reconstruction29 May 2025
- 2022How to Combine Membership-Inference Attacks on Multiple Updated Models12 May 2022
- 2022Parameters or Privacy: A Provable Tradeoff Between Overparameterization and Membership Inference2 Feb 2022
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2021Efficient Mean Estimation with Pure Differential Privacy via a Sum-of-Squares Exponential Mechanismcited by 50
- 2021Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Datacited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2023Stability is Stable: Connections between Replicability, Privacy, and Adaptive Generalizationcited by 42
- 2021Leveraging Public Data for Practical Private Query Releasecited by 39
- 2021Private Robust Estimation by Stabilizing Convex Relaxationscited by 38
12 most cited of 77 All 77 (JSON)
- 2026Performative Privacy: When Differential Privacy Maximizes Utility28 Aug 2026
- 2026Near-optimal node-private community estimation in polynomial-time10 Jul 2026
- 2026On the Curse of Dimensionality in Private Sparse Covariance Estimation and PCA20 Jun 2026
- 2026A Van Trees Lower Bound for Fully Interactive Differentially Private Federated Learning19 May 2026
- 2026Integrating Feature Correlation in Differential Privacy with Applications in DP-ERM5 May 2026
- 2026On the Price of Privacy for Language Identification and Generation8 Apr 2026
- 2026Minimax optimal differentially private synthetic data for smooth queries2 Feb 2026
- 2025On the Gradient Complexity of Private Optimization with Private Oracles17 Nov 2025
- 2025Lower Bounds for Public-Private Learning under Distribution Shift23 Jul 2025
- 2025Optimal Differentially Private Ranking from Pairwise Comparisons12 Jul 2025
- 2025Purifying Approximate Differential Privacy with Randomized Post-processing27 Mar 2025
- 2025Fed-SB: A Silver Bullet for Extreme Communication Efficiency and Performance in (Private) Federated LoRA Fine-Tuning21 Feb 2025
12 newest of 77 All 77 (JSON)