Fingerprinting Codes Meet Geometry: Improved Lower Bounds for Private Query Release and Adaptive Data Analysis
Not on the map. Why?
Abstract (arXiv)
Fingerprinting codes are a crucial tool for proving lower bounds in differential privacy. They have been used to prove tight lower bounds for several fundamental questions, especially in the ``low accuracy'' regime. Unlike reconstruction/discrepancy approaches however, they are more suited for query sets that arise naturally from the fingerprinting codes construction. In this work, we propose a general framework for proving fingerprinting type lower bounds, that allows us to tailor the technique to the geometry of the query set. Our approach allows us to prove several new results, including the following. First, we show that any (sample- and population-)accurate algorithm for answering Q arbitrary adaptive counting queries over a universe X to accuracy α needs Omega(frac√log |X|· log Qα3) samples, matching known upper bounds. This shows that the approaches based on differential privacy are optimal for this question, and improves significantly on the previously known lower bounds of fraclog Qα2 and min(√Q, √log |X|)/α2. Second, we show that any (varepsilon,δ)-DP algorithm for answering Q counting queries to accuracy α needs Omega(frac√ log|X| log(1/δ) log Qvarepsilonα2) samples, matching known upper bounds up to constants. Our framework allows for proving this bound via a direct correlation analysis and improves the prior bound of [BUV'14] by √log(1/δ). Third, we characterize the sample complexity of answering a set of random 0-1 queries under approximate differential privacy. We give new upper and lower bounds in different regimes. By combining them with known results, we can complete the whole picture.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 40 of its 68 references that are in the map. First posted on arXiv 18 Dec 2024.
Builds on
40 of 68 references.
References · 40
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2016Concentrated Differential Privacycited by 139
- 2014Preserving Statistical Validity in Adaptive Data Analysiscited by 102
- 2015Algorithmic Stability for Adaptive Data Analysiscited by 88
- 2013Fingerprinting Codes and the Price of Approximate Differential Privacycited by 81
- 2015Generalization in Adaptive Data Analysis and Holdout Reusecited by 76
- 2023Federated Learning of Gboard Language Models with Differential Privacycited by 64
- 2015Between Pure and Approximate Differential Privacycited by 55
- 2020Differentially Private Assouad, Fano, and Le Camcited by 54
- 2022Geographic Spines in the 2020 Census Disclosure Avoidance Systemcited by 42
- 2014Interactive Fingerprinting Codes and the Hardness of Preventing False Discoverycited by 35
- 2014Preventing False Discovery in Interactive Data Analysis is Hardcited by 34
28 more
- 2017Tight Lower Bounds for Differentially Private Selectioncited by 33
- 2022New Lower Bounds for Private Estimation and a Generalized Fingerprinting Lemmacited by 32
- 2017Calibrating Noise to Variance in Adaptive Data Analysiscited by 28
- 2017Generalization for Adaptively-chosen Estimators via Stable Mediancited by 26
- 2021Tight and Robust Private Mean Estimation with Few Userscited by 26
- 2016Max-Information, Differential Privacy, and Post-Selection Hypothesis Testingcited by 25
- 2020A Framework for Adversarially Robust Streaming Algorithmscited by 21
- 2020Adversarially Robust Streaming Algorithms via Differential Privacycited by 21
- 2023Score Attack: A Lower Bound Technique for Optimal Differentially Private Learningcited by 21
- 2019The Adversarial Robustness of Samplingcited by 18
- 2013Efficient Algorithms for Privately Releasing Marginals via Convex Relaxationscited by 17
- 2021Dynamic Algorithms Against an Adaptive Adversary: Generic Constructions and Lower Boundscited by 17
- 2018The Limits of Post-Selection Generalizationcited by 16
- 2023Better and Simpler Lower Bounds for Differentially Private Statistical Estimationcited by 16
- 2024Differentially Private Release of Israel's National Registry of Live Birthscited by 16
- 2020A bounded-noise mechanism for differential privacycited by 15
- 2018Towards Instance-Optimal Private Query Releasecited by 9
- 2022Adaptive Data Analysis with Correlated Observationscited by 9
- 2023On Differential Privacy and Adaptive Data Analysis with Bounded Spacecited by 9
- 2023Subsampling Suffices for Adaptive Data Analysiscited by 9
- 2024Lower Bounds for Private Estimation of Gaussian Covariance Matrices under All Reasonable Parameter Regimescited by 9
- 2024Instance-Optimal Private Density Estimation in the Wasserstein Distancecited by 9
- 2023Smooth Lower Bounds for Differentially Private Algorithms via Padding-and-Permuting Fingerprinting Codescited by 8
- 2017Sampling Without Compromising Accuracy in Adaptive Data Analysiscited by 6
- 2023Adaptive Data Analysis in a Balanced Adversarial Modelcited by 5
- 2017Information, Privacy and Stability in Adaptive Data Analysiscited by 4
- 2016Challenges in Bayesian Adaptive Data Analysiscited by 3
- 2022Generalized Private Selection and Testing with High Confidencecited by 2
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.
- 2025Lower Bounds for Public-Private Learning under Distribution Shiftcited by 0
- 2026Is Randomness Necessary for Adaptive Data Analysis?cited by 0
- 2026How Reusable Are Benchmarks with Richer Feedback?cited by 0
- 2026How Reusable Are Benchmarks with Richer Feedback?26 Sep 2026
- 2026Is Randomness Necessary for Adaptive Data Analysis?8 Jul 2026
- 2025Lower Bounds for Public-Private Learning under Distribution Shift23 Jul 2025