Purifying Approximate Differential Privacy with Randomized Post-processing
Not on the map. Why?
Abstract (arXiv)
We propose a framework to convert (varepsilon, δ)-approximate Differential Privacy (DP) mechanisms into (varepsilon', 0)-pure DP mechanisms under certain conditions, a process we call ``purification.'' This algorithmic technique leverages randomized post-processing with calibrated noise to eliminate the δ parameter while achieving near-optimal privacy-utility tradeoff for pure DP. It enables a new design strategy for pure DP algorithms: first run an approximate DP algorithm with certain conditions, and then purify. This approach allows one to leverage techniques such as strong composition and propose-test-release that require δ>0 in designing pure-DP methods with δ=0. We apply this framework in various settings, including Differentially Private Empirical Risk Minimization (DP-ERM), stability-based release, and query release tasks. To the best of our knowledge, this is the first work with a statistically and computationally efficient reduction from approximate DP to pure DP. Finally, we illustrate the use of this reduction for proving lower bounds under approximate DP constraints with explicit dependence in δ, avoiding the sophisticated fingerprinting code construction.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 26 of its 70 references that are in the map. First posted on arXiv 27 Mar 2025.
Builds on
26 of 70 references.
References · 26
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2018Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergencescited by 237
- 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 234
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 218
- 2023Handbook of Convergence Theorems for (Stochastic) Gradient Methodscited by 158
- 2020Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 152
- 2018Differentially Private Empirical Risk Minimization Revisited: Faster and More Generalcited by 127
- 2018Privacy Amplification by Iterationcited by 97
- 2021Private Stochastic Convex Optimization: Optimal Rates in ℓ1 Geometrycited by 83
- 2013Fingerprinting Codes and the Price of Approximate Differential Privacycited by 81
- 2018Revisiting differentially private linear regression: optimal and adaptive prediction & estimation in unbounded domaincited by 60
14 more
- 2021Non-Euclidean Differentially Private Stochastic Convex Optimization: Optimal Rates in Linear Timecited by 51
- 2022Private Convex Optimization via Exponential Mechanismcited by 47
- 2016On the Theory and Practice of Privacy-Preserving Bayesian Data Analysiscited by 34
- 2016Make Up Your Mind: The Price of Online Queries in Differential Privacycited by 26
- 2014Private Empirical Risk Minimization Beyond the Worst Case: The Effect of the Constraint Set Geometrycited by 24
- 2017Differentially Private Empirical Risk Minimization with Input Perturbationcited by 19
- 2023Faster Differentially Private Convex Optimization via Second-Order Methodscited by 13
- 2023Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learnerscited by 11
- 2021Differentially Private Coordinate Descent for Composite Empirical Risk Minimizationcited by 10
- 2021Sampling from Log-Concave Distributions with Infinity-Distance Guaranteescited by 8
- 2018An end-to-end Differentially Private Latent Dirichlet Allocation Using a Spectral Algorithmcited by 4
- 2023Tractable MCMC for Private Learning with Pure and Gaussian Differential Privacycited by 4
- 2024Improved Sample Complexity for Private Nonsmooth Nonconvex Optimizationcited by 4
- 2022Differentially Private Sampling from Rashomon Sets, and the Universality of Langevin Diffusion for Convex Optimizationcited by 3
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.