Prediction with Expert Advice under Local Differential Privacy
Not on the map. Why?
Abstract (arXiv)
We study the classic problem of prediction with expert advice under the constraint of local differential privacy (LDP). In this context, we first show that a classical algorithm naturally satisfies LDP and then design two new algorithms that improve it: RW-AdaBatch and RW-Meta. For RW-AdaBatch, we exploit the limited-switching behavior induced by LDP to provide a novel form of privacy amplification that grows stronger on easier data, analogous to the shuffle model in offline learning. Drawing on the theory of random walks, we prove that this improvement carries essentially no utility cost. For RW-Meta, we develop a general method for privately selecting between experts that are themselves non-trivial learning algorithms, and we show that in the context of LDP this carries no extra privacy cost. In contrast, prior work has only considered data-independent experts. We also derive formal regret bounds that scale inversely with the degree of independence between experts. Our analysis is supplemented by evaluation on real-world data reported by hospitals during the COVID-19 pandemic; RW-Meta outperforms both the classical baseline and a state-of-the-art textitcentral DP algorithm by 1.5-3× on the task of predicting which hospital will report the highest density of COVID patients each week.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 25 of its 46 references that are in the map. First posted on arXiv 7 Dec 2025.
Builds on
25 of 46 references.
References · 25
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 169
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 163
- 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
- 2017The Price of Differential Privacy For Online Learningcited by 44
- 2019The Power of Factorization Mechanisms in Local and Central Differential Privacycited by 30
- 2013Local Privacy, Data Processing Inequalities, and Statistical Minimax Ratescited by 26
- 2014Online Linear Optimization via Smoothingcited by 23
- 2022Private Online Prediction from Experts: Separations and Faster Ratescited by 17
- 2023Privacy Amplification for Matrix Mechanismscited by 17
13 more
- 2020Continuous Release of Data Streams under both Centralized and Local Differential Privacycited by 13
- 2023Unified Enhancement of Privacy Bounds for Mixture Mechanisms via f-Differential Privacycited by 13
- 2020Curating a COVID-19 data repository and forecasting county-level death counts in the United Statescited by 10
- 2023Concentrated Differential Privacy for Banditscited by 10
- 2013Prediction by Random-Walk Perturbationcited by 7
- 2021Secure Random Sampling in Differential Privacycited by 5
- 2018Private Continual Release of Real-Valued Data Streamscited by 3
- 2019Privacy-Preserving Multi-Party Contextual Banditscited by 3
- 2023Improved Differentially Private and Lazy Online Convex Optimizationcited by 3
- 2024Private Online Learning via Lazy Algorithmscited by 3
- 2024Federated Online Prediction from Experts with Differential Privacy: Separations and Regret Speed-upscited by 1
- 2025Tracking the Best Expert Privatelycited by 1
- 2025How to Securely Shuffle? A survey about Secure Shufflers for privacy-preserving computationscited by 1
Built on by
Not cited yet.