Dimension-free Private Mean Estimation for Anisotropic Distributions
Not on the map. Why?
Abstract (arXiv)
We present differentially private algorithms for high-dimensional mean estimation. Previous private estimators on distributions over ℝd suffer from a curse of dimensionality, as they require Omega(d1/2) samples to achieve non-trivial error, even in cases where O(1) samples suffice without privacy. This rate is unavoidable when the distribution is isotropic, namely, when the covariance is a multiple of the identity matrix, or when accuracy is measured with respect to the affine-invariant Mahalanobis distance. Yet, real-world data is often highly anisotropic, with signals concentrated on a small number of principal components. We develop estimators that are appropriate for such signalsunicodex2013our estimators are (varepsilon,δ)-differentially private and have sample complexity that is dimension-independent for anisotropic subgaussian distributions. Given n samples from a distribution with known covariance-proxy Sigma and unknown mean μ, we present an estimator hatμ that achieves error |hatμ-μ|2≤ α, as long as ngtrsimtr(Sigma)/α2+ tr(Sigma1/2)/(αvarepsilon). In particular, when pmbσ2=(σ12, ldots, σd2) are the singular values of Sigma, we have tr(Sigma)=|pmbσ|22 and tr(Sigma1/2)=|pmbσ|1, and hence our bound avoids dimension-dependence when the signal is concentrated in a few principal components. We show that this is the optimal sample complexity for this task up to logarithmic factors. Moreover, for the case of unknown covariance, we present an algorithm whose sample complexity has improved dependence on the dimension, from d1/2 to d1/4.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 30 of its 68 references that are in the map. First posted on arXiv 1 Nov 2024.
Builds on
30 of 68 references.
References · 30
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Benign Overfitting in Linear Regressioncited by 544
- 2013The Composition Theorem for Differential Privacycited by 290
- 2014RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Responsecited by 262
- 2019Mean estimation and regression under heavy-tailed distributions--a surveycited by 133
- 2017Finite Sample Differentially Private Confidence Intervalscited by 103
- 2018Privately Learning High-Dimensional Distributionscited by 103
- 2013Fingerprinting Codes and the Price of Approximate Differential Privacycited by 81
- 2021Robust and Differentially Private Mean Estimationcited by 66
- 2021Differential privacy and robust statistics in high dimensionscited by 64
- 2019Private Hypothesis Selectioncited by 60
- 2022Robustness Implies Privacy in Statistical Estimationcited by 47
18 more
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2022Geographic Spines in the 2020 Census Disclosure Avoidance Systemcited by 42
- 2020On the Sample Complexity of Privately Learning Unbounded High-Dimensional Gaussianscited by 41
- 2021Instance-optimal Mean Estimation Under Differential Privacycited by 37
- 2014Interactive Fingerprinting Codes and the Hardness of Preventing False Discoverycited by 35
- 2015Simultaneous Private Learning of Multiple Conceptscited by 34
- 2021FriendlyCore: Practical Differentially Private Aggregationcited by 34
- 2017Tight Lower Bounds for Differentially Private Selectioncited by 33
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
- 2023From Robustness to Privacy and Backcited by 27
- 2016Make Up Your Mind: The Price of Online Queries in Differential Privacycited by 26
- 2020LinkedIn's Audience Engagements API: A Privacy Preserving Data Analytics System at Scalecited by 26
- 2023Fast, Sample-Efficient, Affine-Invariant Private Mean and Covariance Estimation for Subgaussian Distributionscited by 22
- 2021Privately Learning Subspacescited by 16
- 2023PLAN: Variance-Aware Private Mean Estimationcited by 6
- 2023Statistically Optimal Robust Mean and Covariance Estimation for Anisotropic Gaussianscited by 3
- 2023General Gaussian Noise Mechanisms and Their Optimality for Unbiased Mean Estimationcited by 3
- 2023Subset-Based Instance Optimality in Private Estimationcited by 3
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 3.
6 papers.
- 2025Tukey Depth Mechanisms for Practical Private Mean Estimationcited by 2
- 2024Optimal Federated Learning for Functional Mean Estimation under Heterogeneous Privacy Constraintscited by 1
- 2025Improved subsample-and-aggregate via the private modified winsorized meancited by 1
- 2026Computation-Utility-Privacy Tradeoffs in Bayesian Estimationcited by 1
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacycited by 0
- 2026Computationally tractable robust differentially private mean estimationcited by 0
- 2026Computationally tractable robust differentially private mean estimation10 Jun 2026
- 2026Jacobian-Guided Anisotropic Noise Reshaping for Enhancing Representation Utility under Local Differential Privacy16 May 2026
- 2026Computation-Utility-Privacy Tradeoffs in Bayesian Estimation18 Mar 2026
- 2025Tukey Depth Mechanisms for Practical Private Mean Estimation25 Feb 2025
- 2025Improved subsample-and-aggregate via the private modified winsorized mean23 Jan 2025
- 2024Optimal Federated Learning for Functional Mean Estimation under Heterogeneous Privacy Constraints25 Dec 2024