Differentially Private Query Release Through Adaptive Projection
Not on the map. Why?
Abstract (arXiv)
We propose, implement, and evaluate a new algorithm for releasing answers to very large numbers of statistical queries like k-way marginals, subject to differential privacy. Our algorithm makes adaptive use of a continuous relaxation of the Projection Mechanism, which answers queries on the private dataset using simple perturbation, and then attempts to find the synthetic dataset that most closely matches the noisy answers. We use a continuous relaxation of the synthetic dataset domain which makes the projection loss differentiable, and allows us to use efficient ML optimization techniques and tooling. Rather than answering all queries up front, we make judicious use of our privacy budget by iteratively and adaptively finding queries for which our (relaxed) synthetic data has high error, and then repeating the projection. We perform extensive experimental evaluations across a range of parameters and datasets, and find that our method outperforms existing algorithms in many cases, especially when the privacy budget is small or the query class is large.
Key facts. Cited by 50 papers in the map (data through 7 Oct 2026). Builds on 15 of its 44 references that are in the map. First posted on arXiv 11 Mar 2021.
Builds on
15 of 44 references.
References · 15
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2016From Softmax to Sparsemax: A Sparse Model of Attention and Multi-Label Classificationcited by 337
- 2020DP-CGAN: Differentially Private Synthetic Data and Label Generationcited by 118
- 2019Graphical-model based estimation and inference for differential privacycited by 73
- 2020New Oracle-Efficient Algorithms for Private Synthetic Data Releasecited by 43
- 2019Practical Differentially Private Top-k Selection with Pay-what-you-get Compositioncited by 38
- 2018Optimizing error of high-dimensional statistical queries under differential privacycited by 29
- 2014Dual Query: Practical Private Query Release for High Dimensional Datacited by 26
- 2020P3GM: Private High-Dimensional Data Release via Privacy Preserving Phased Generative Modelcited by 21
- 2020Private Post-GAN Boostingcited by 20
- 2013Efficient Algorithms for Privately Releasing Marginals via Convex Relaxationscited by 17
- 2017Marginal Release Under Local Differential Privacycited by 9
3 more
- 2018Towards Instance-Optimal Private Query Releasecited by 9
- 2018How to Use Heuristics for Differential Privacycited by 6
- 2013Faster Private Release of Marginals on Small Databasescited by 4
Built on by
Citing papers per year: 2021: 3; 2022: 8; 2023: 13; 2024: 15; 2025: 8; 2026: 3.
50 papers.
Sort:
By area:
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
- 2024Privacy-Preserving Instructions for Aligning Large Language Modelscited by 34
- 2023A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Datacited by 23
- 2024Grounding and Evaluation for Large Language Models: Practical Challenges and Lessons Learned (Survey)cited by 20
- 2023Generating Private Synthetic Data with Genetic Algorithmscited by 18
- 2024Differentially Private Tabular Data Synthesis using Large Language Modelscited by 16
- 2022Confidence-Ranked Reconstruction of Census Microdata from Published Statisticscited by 15
- 2023Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utilitycited by 13
- 2022dpart: Differentially Private Autoregressive Tabular, a General Framework for Synthetic Data Generationcited by 12
38 more
- 2023CuTS: Customizable Tabular Synthetic Data Generationcited by 12
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 12
- 2024Privacy Vulnerabilities in Marginals-based Synthetic Datacited by 10
- 2022Noise-Aware Statistical Inference with Differentially Private Synthetic Datacited by 9
- 2023Post-processing Private Synthetic Data for Improving Utility on Selected Measurescited by 9
- 2024Privacy-preserving data release leveraging optimal transport and particle gradient descentcited by 8
- 2024Joint Selection: Adaptively Incorporating Public Information for Private Synthetic Datacited by 8
- 2025Synthetic Tabular Data: Methods, Attacks and Defensescited by 8
- 2022QuerySnout: Automating the Discovery of Attribute Inference Attacks against Query-Based Systemscited by 6
- 2023FLAIM: AIM-based Synthetic Data Generation in the Federated Settingcited by 6
- 2024Tabular Data Synthesis with Differential Privacy: A Surveycited by 6
- 2021Relaxed Marginal Consistency for Differentially Private Query Answeringcited by 5
- 2025Is API Access to LLMs Useful for Generating Private Synthetic Tabular Data?cited by 5
- 2023A Simple and Practical Method for Reducing the Disparate Impact of Differential Privacycited by 4
- 2024Private Regression via Data-Dependent Sufficient Statistic Perturbationcited by 4
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Datacited by 4
- 2025Improving the Generation and Evaluation of Synthetic Data for Downstream Medical Causal Inferencecited by 4
- 2022The Tensor Data Platform: Towards an AI-centric Database Systemcited by 3
- 2024Sharper Bounds for Chebyshev Moment Matching, with Applicationscited by 3
- 2021Rejoinder: Gaussian Differential Privacycited by 2
- 2022Private Synthetic Data with Hierarchical Structurecited by 2
- 2022Answering Private Linear Queries Adaptively using the Common Mechanismcited by 2
- 2023ResidualPlanner+: a scalable matrix mechanism for marginals and beyondcited by 2
- 2024A Bias-Variance Decomposition for Ensembles over Multiple Synthetic Datasetscited by 2
- 2024Differentially Private Synthetic Data Generation for Relational Databasescited by 2
- 2024Privacy without Noisy Gradients: Slicing Mechanism for Generative Model Trainingcited by 2
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generationcited by 2
- 2025Private Evolution Convergescited by 2
- 2023Private Synthetic Data Meets Ensemble Learningcited by 1
- 2024Efficient and Private Marginal Reconstruction with Local Non-Negativitycited by 1
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspectivecited by 1
- 2026Accurate and Scalable Matrix Mechanisms via Divide and Conquercited by 1
- 2023PRIMO: Private Regression in Multiple Outcomescited by 0
- 2023Partition-based differentially private synthetic data generationcited by 0
- 2024Differentially Private Synthetic High-dimensional Tabular Streamcited by 0
- 2025Differentially Private Synthetic Data Release for Topics API Outputscited by 0
- 2025Privacy Blur: Quantifying Privacy and Utility for Image Data Releasecited by 0
- 2026Private Adaptive Covariance Estimation via Gaussian Graphical Modelscited by 0
- 2026Private Adaptive Covariance Estimation via Gaussian Graphical Models22 May 2026
- 2026Accurate and Scalable Matrix Mechanisms via Divide and Conquer1 Apr 2026
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective30 Jan 2026
- 2025Privacy Blur: Quantifying Privacy and Utility for Image Data Release18 Dec 2025
- 2025Improving the Generation and Evaluation of Synthetic Data for Downstream Medical Causal Inference21 Oct 2025
- 2025Differentially Private Synthetic Data Release for Topics API Outputs30 Jun 2025
- 2025Private Evolution Converges10 Jun 2025
- 2025Synthetic Tabular Data: Methods, Attacks and Defenses6 Jun 2025
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generation31 May 2025
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data9 Apr 2025
- 2025Is API Access to LLMs Useful for Generating Private Synthetic Tabular Data?10 Feb 2025
- 2024Tabular Data Synthesis with Differential Privacy: A Survey4 Nov 2024
38 more
- 2024Privacy without Noisy Gradients: Slicing Mechanism for Generative Model Training25 Oct 2024
- 2024Privacy Vulnerabilities in Marginals-based Synthetic Data7 Oct 2024
- 2024Efficient and Private Marginal Reconstruction with Local Non-Negativity1 Oct 2024
- 2024Differentially Private Synthetic High-dimensional Tabular Stream31 Aug 2024
- 2024Sharper Bounds for Chebyshev Moment Matching, with Applications22 Aug 2024
- 2024Grounding and Evaluation for Large Language Models: Practical Challenges and Lessons Learned (Survey)10 Jul 2024
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging20 Jun 2024
- 2024Differentially Private Tabular Data Synthesis using Large Language Models3 Jun 2024
- 2024Differentially Private Synthetic Data Generation for Relational Databases29 May 2024
- 2024Private Regression via Data-Dependent Sufficient Statistic Perturbation23 May 2024
- 2024Joint Selection: Adaptively Incorporating Public Information for Private Synthetic Data12 Mar 2024
- 2024Privacy-Preserving Instructions for Aligning Large Language Models21 Feb 2024
- 2024A Bias-Variance Decomposition for Ensembles over Multiple Synthetic Datasets6 Feb 2024
- 2024Privacy-preserving data release leveraging optimal transport and particle gradient descent31 Jan 2024
- 2023A Simple and Practical Method for Reducing the Disparate Impact of Differential Privacy18 Dec 2023
- 2023Private Synthetic Data Meets Ensemble Learning15 Oct 2023
- 2023Partition-based differentially private synthetic data generation10 Oct 2023
- 2023FLAIM: AIM-based Synthetic Data Generation in the Federated Setting5 Oct 2023
- 2023CuTS: Customizable Tabular Synthetic Data Generation7 Jul 2023
- 2023SoK: Privacy-Preserving Data Synthesis5 Jul 2023
- 2023Generating Private Synthetic Data with Genetic Algorithms5 Jun 2023
- 2023Post-processing Private Synthetic Data for Improving Utility on Selected Measures24 May 2023
- 2023Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility18 May 2023
- 2023ResidualPlanner+: a scalable matrix mechanism for marginals and beyond14 May 2023
- 2023PRIMO: Private Regression in Multiple Outcomes7 Mar 2023
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy1 Mar 2023
- 2023A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Data24 Jan 2023
- 2022Answering Private Linear Queries Adaptively using the Common Mechanism30 Nov 2022
- 2022QuerySnout: Automating the Discovery of Attribute Inference Attacks against Query-Based Systems9 Nov 2022
- 2022Confidence-Ranked Reconstruction of Census Microdata from Published Statistics6 Nov 2022
- 2022The Tensor Data Platform: Towards an AI-centric Database System4 Nov 2022
- 2022Private Synthetic Data for Multitask Learning and Marginal Queries15 Sep 2022
- 2022dpart: Differentially Private Autoregressive Tabular, a General Framework for Synthetic Data Generation12 Jul 2022
- 2022Private Synthetic Data with Hierarchical Structure13 Jun 2022
- 2022Noise-Aware Statistical Inference with Differentially Private Synthetic Data28 May 2022
- 2021Relaxed Marginal Consistency for Differentially Private Query Answering13 Sep 2021
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methods14 Jun 2021
- 2021Rejoinder: Gaussian Differential Privacy5 Apr 2021
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
- 2023A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Datacited by 23
- 2024Grounding and Evaluation for Large Language Models: Practical Challenges and Lessons Learned (Survey)cited by 20
- 2023Generating Private Synthetic Data with Genetic Algorithmscited by 18
- 2022Confidence-Ranked Reconstruction of Census Microdata from Published Statisticscited by 15
- 2023Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utilitycited by 13
- 2022dpart: Differentially Private Autoregressive Tabular, a General Framework for Synthetic Data Generationcited by 12
- 2023CuTS: Customizable Tabular Synthetic Data Generationcited by 12
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 12
12 most cited of 48 All 48 (JSON)
- 2026Private Adaptive Covariance Estimation via Gaussian Graphical Models22 May 2026
- 2026Accurate and Scalable Matrix Mechanisms via Divide and Conquer1 Apr 2026
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective30 Jan 2026
- 2025Privacy Blur: Quantifying Privacy and Utility for Image Data Release18 Dec 2025
- 2025Improving the Generation and Evaluation of Synthetic Data for Downstream Medical Causal Inference21 Oct 2025
- 2025Differentially Private Synthetic Data Release for Topics API Outputs30 Jun 2025
- 2025Private Evolution Converges10 Jun 2025
- 2025Synthetic Tabular Data: Methods, Attacks and Defenses6 Jun 2025
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generation31 May 2025
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data9 Apr 2025
- 2025Is API Access to LLMs Useful for Generating Private Synthetic Tabular Data?10 Feb 2025
- 2024Tabular Data Synthesis with Differential Privacy: A Survey4 Nov 2024
12 newest of 48 All 48 (JSON)