{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,11]],"date-time":"2026-02-11T20:49:41Z","timestamp":1770842981884,"version":"3.50.1"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T00:00:00Z","timestamp":1590969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100010029","name":"University of Lancaster","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100010029","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Stat Comput"],"published-print":{"date-parts":[[2020,9]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Post randomization methods are among the most popular disclosure limitation techniques for both categorical and continuous data. In the categorical case, given a stochastic matrix<jats:italic>M<\/jats:italic>and a specified variable, an individual belonging to category<jats:italic>i<\/jats:italic>is changed to category<jats:italic>j<\/jats:italic>with probability<jats:inline-formula><jats:alternatives><jats:tex-math>$$M_{i,j}$$<\/jats:tex-math><mml:math xmlns:mml=\"http:\/\/www.w3.org\/1998\/Math\/MathML\"><mml:msub><mml:mi>M<\/mml:mi><mml:mrow><mml:mi>i<\/mml:mi><mml:mo>,<\/mml:mo><mml:mi>j<\/mml:mi><\/mml:mrow><\/mml:msub><\/mml:math><\/jats:alternatives><\/jats:inline-formula>. Every approach to choose the randomization matrix<jats:italic>M<\/jats:italic>has to balance between two desiderata: (1) preserving as much statistical information from the raw data as possible; (2) guaranteeing the privacy of individuals in the dataset. This trade-off has generally been shown to be very challenging to solve. In this work, we use recent tools from the computer science literature and propose to choose<jats:italic>M<\/jats:italic>as the solution of a constrained maximization problems. Specifically,<jats:italic>M<\/jats:italic>is chosen as the solution of a constrained maximization problem, where we maximize the mutual information between raw and transformed data, given the constraint that the transformation satisfies the notion of differential privacy. For the general categorical model, it is shown how this maximization problem reduces to a convex linear programming and can be therefore solved with known optimization algorithms.<\/jats:p>","DOI":"10.1007\/s11222-020-09949-3","type":"journal-article","created":{"date-parts":[[2020,6,2]],"date-time":"2020-06-02T18:04:47Z","timestamp":1591121087000},"page":"1347-1361","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["An information theoretic approach to post randomization methods under differential privacy"],"prefix":"10.1007","volume":"30","author":[{"given":"Fadhel","family":"Ayed","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0954-1244","authenticated-orcid":false,"given":"Marco","family":"Battiston","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Federico","family":"Camerlenghi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,6,1]]},"reference":[{"key":"9949_CR1","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1080\/01621459.1990.10475304","volume":"85","author":"JG Bethlehem","year":"1990","unstructured":"Bethlehem, J.G., Keller, W.J., Pannekoek, J.: Disclosure control of microdata. J. Am. Stat. Assoc. 85, 38\u201345 (1990)","journal-title":"J. Am. Stat. Assoc."},{"key":"9949_CR2","unstructured":"Borgs, C., Chayes, J., Smith, A.: Private Graphon Estimation for Sparse Graphs. ArXiv:1506.06162 (2015)"},{"key":"9949_CR3","doi-asserted-by":"crossref","unstructured":"Bun, M., Steine, T.: Concentrated Differential Privacy: simplifications, extensions, and lower bounds. In: Theory and Cryptography\u201414th International Conference, pp. 635\u2013658 (2016)","DOI":"10.1007\/978-3-662-53641-4_24"},{"key":"9949_CR4","doi-asserted-by":"crossref","unstructured":"Chatzikokolakis, K., Andr\u00e9s, M.E., Bordenabe, N.E., Palamidessi, C.: Broadening the scope of differential privacy using metrics. In: Privacy Enhancing Technologies, pp. 82\u2013102. Springer, Berlin(2013)","DOI":"10.1007\/978-3-642-39077-7_5"},{"key":"9949_CR5","volume-title":"Elements of Information Theory","author":"TM Cover","year":"2012","unstructured":"Cover, T.M., Thomas, J.A.: Elements of Information Theory. Wiley, Berlin (2012)"},{"key":"9949_CR6","unstructured":"De Wolf, P.P., Gouweleeuw, J.M., Kooiman, P., Willenborg, L.C.R.J.: Reflection on PRAM. Statistics Netherlands. Voorburg, Report, Department of Statistical Methods (1997)"},{"key":"9949_CR7","first-page":"1","volume":"18","author":"C Dimitrakakis","year":"2017","unstructured":"Dimitrakakis, C., Nelson, B., Zhang, Z., Mitrokotsa, A., Rubistein, B.I.P.: Differential Privacy for Bayesian Inference through Posterior Sampling. J. Mach. Learn. Res. 18, 1\u201339 (2017)","journal-title":"J. Mach. Learn. Res."},{"issue":"521","key":"9949_CR8","doi-asserted-by":"publisher","first-page":"182","DOI":"10.1080\/01621459.2017.1389735","volume":"113","author":"JC Duchi","year":"2018","unstructured":"Duchi, J.C., Jordan, M.I., Wainwright, M.J.: Minimax optimal procedures for locally private estimation. JASA 113(521), 182\u2013201 (2018)","journal-title":"JASA"},{"key":"9949_CR9","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1080\/01621459.1986.10478229","volume":"81","author":"GT Duncan","year":"1986","unstructured":"Duncan, G.T., Lambert, D.: Disclosure-limited data dissemination. J. Am. Stat. Assoc. 81, 10\u201328 (1986)","journal-title":"J. Am. Stat. Assoc."},{"key":"9949_CR10","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1080\/07350015.1989.10509729","volume":"7","author":"GT Duncan","year":"1989","unstructured":"Duncan, G.T., Lambert, D.: The risk of disclosure for microdata. J. Bus. Econ. Stat. 7, 207\u2013217 (1989)","journal-title":"J. Bus. Econ. Stat."},{"key":"9949_CR11","doi-asserted-by":"crossref","unstructured":"Dwork, C., McSherry, F., Nissim, K., Smith, A.: Calibrating noise to sensitivity in private data analysis. In: Proceedings of the Third Theory of Cryptography Conference, pp. 265\u2013284 (2006)","DOI":"10.1007\/11681878_14"},{"key":"9949_CR12","doi-asserted-by":"publisher","first-page":"211","DOI":"10.1561\/0400000042","volume":"9","author":"C Dwork","year":"2014","unstructured":"Dwork, C., Roth, A.: The algorithmic foundations of differential privacy. Found. Trends Theor. Comput. Sci. 9, 211\u2013407 (2014)","journal-title":"Found. Trends Theor. Comput. Sci."},{"key":"9949_CR13","unstructured":"Eland, A.: Tackling urban mobility with technology by Andrew Eland. Google Policy Europe Blog, Nov 18 (2015)"},{"key":"9949_CR14","doi-asserted-by":"crossref","unstructured":"Erlingsson, U., Pihur, V., Korolova, A.: RAPPOR: randomized aggregatable privacy-preserving ordinal response. In: Proceedings of the 21st ACM Conference on Computer and Communications Security (2014)","DOI":"10.1145\/2660267.2660348"},{"key":"9949_CR15","doi-asserted-by":"publisher","first-page":"419","DOI":"10.1111\/j.1751-5823.2002.tb00178.x","volume":"70","author":"AL Gibbs","year":"2002","unstructured":"Gibbs, A.L., Su, F.E.: On choosing and bounding probability metrics. Int. Stat. Rev. 70, 419\u2013435 (2002)","journal-title":"Int. Stat. Rev."},{"key":"9949_CR16","unstructured":"Gouweleeuw, J.M., Kooiman, P., Willenborg, L.C.R.J., De Wolf, P.P.: Post randomization for statistical disclosure control: theory and implementation. Statistics Netherlands. Voorburg, Report, Department of Statistical Methods (1997)"},{"key":"9949_CR17","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-7970-4","volume-title":"Entropy and Information Theory","author":"RM Gray","year":"2011","unstructured":"Gray, R.M.: Entropy and Information Theory, 2nd edn. Springer, Berlin (2011)","edition":"2"},{"key":"9949_CR18","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1126\/science.1229566","volume":"339","author":"M Gymrek","year":"2013","unstructured":"Gymrek, M., McGuire, A.L., Golan, D., Halperin, E., Erlich, Y.: Identifying personal genomes by surname inference. Science 339, 321\u2013324 (2013)","journal-title":"Science"},{"key":"9949_CR19","unstructured":"Hall, R., Rinaldo, A., Wasserman, L.: Random differential privacy. ArXiv:1112.2680 (2011)"},{"key":"9949_CR20","doi-asserted-by":"publisher","first-page":"e100016","DOI":"10.1371\/journal.pgen.1000167","volume":"4","author":"N Homer","year":"2008","unstructured":"Homer, N., Szelinger, S., Redman, M., Duggan, D., Tembe, W., Muehling, J., Pearson, J.V., Stephan, D.A., Nelson, S.F., Craig, D.W.: Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLoS Genet. 4, e100016 (2008)","journal-title":"PLoS Genet."},{"key":"9949_CR21","unstructured":"Kooiman, P., Willenborg, L., Gouweleeuw, J.: PRAM: a method for disclosure limitation of microdata. Report, Department of Statistical Methods, Statistics Netherlands, Voorburg (1997)"},{"key":"9949_CR22","first-page":"313","volume":"9","author":"D Lambert","year":"1993","unstructured":"Lambert, D.: Measures of disclosure risk and harm. J. Off. Stat. 9, 313\u2013331 (1993)","journal-title":"J. Off. Stat."},{"key":"9949_CR23","doi-asserted-by":"crossref","unstructured":"Machanavajjhala, A., Kifer, D., Abowd, J.M., Gehrke, J., Vilhuber, L.: Privacy: theory meets practice on the map. In: Proceedings of the 24th International Conference on Data Engineering (2008)","DOI":"10.1109\/ICDE.2008.4497436"},{"key":"9949_CR24","doi-asserted-by":"publisher","first-page":"1385","DOI":"10.1080\/01621459.2012.710508","volume":"107","author":"D Manrique-Vallier","year":"2012","unstructured":"Manrique-Vallier, D., Reiter, J.P.: Estimating identification disclosure risk using mixed membership models. J. Am. Stat. Assoc. 107, 1385\u20131394 (2012)","journal-title":"J. Am. Stat. Assoc."},{"key":"9949_CR25","doi-asserted-by":"publisher","first-page":"1061","DOI":"10.1080\/10618600.2013.844700","volume":"23","author":"D Manrique-Vallier","year":"2014","unstructured":"Manrique-Vallier, D., Reiter, J.P.: Bayesian estimation of discrete multivariate latent structure models with structural zeros. J. Comput. Graph. Stat. 23, 1061\u20131079 (2014)","journal-title":"J. Comput. Graph. Stat."},{"key":"9949_CR26","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1214\/11-SS074","volume":"5","author":"GJ Matthews","year":"2011","unstructured":"Matthews, G.J., Harel, O.: Data confidentiality: a review of methods for statistical disclosure limitation and methods for assessing privacy. Stat. Surv. 5, 1\u201329 (2011)","journal-title":"Stat. Surv."},{"key":"9949_CR27","doi-asserted-by":"crossref","unstructured":"Narayanan, A., Shmatikov, V.: Robust de-anonymization of large datasets. In: Proceedings of the IEEE Security and Privacy Conference, pp. 111\u2013125 (2008)","DOI":"10.1109\/SP.2008.33"},{"key":"9949_CR28","unstructured":"Ruggles, S., Alexander, J.T., Genadek, K., Goeken, R., Schroeder, M.B., Sobek, M.: Integrated public use microdata series: version 5.0 [Machine-readable database]. University of Minnesota, Minneapolis. Available at https:\/\/usa.ipums.org\/usa\/ (2010)"},{"key":"9949_CR29","doi-asserted-by":"publisher","first-page":"358","DOI":"10.1214\/17-STS641","volume":"33","author":"Y Rinott","year":"2018","unstructured":"Rinott, Y., O\u2019Keefe, C.M., Shlomo, N., Skinner, C.: Confidentiality and differential privacy in the dissemination of frequency tables. Stat. Sci. 33, 358\u2013385 (2018)","journal-title":"Stat. Sci."},{"issue":"3","key":"9949_CR30","doi-asserted-by":"publisher","first-page":"1291","DOI":"10.1214\/09-AOAS317","volume":"4","author":"N Shlomo","year":"2010","unstructured":"Shlomo, N., Skinner, C.J.: Assessing the protection provided by misclassification-based disclosure limitation methods for survey microdata. Ann. Appl. Stat. 4(3), 1291\u20131310 (2010)","journal-title":"Ann. Appl. Stat."},{"key":"9949_CR31","doi-asserted-by":"crossref","unstructured":"Skinner, C.J, Elliot, M.J: A measure of disclosure risk for microdata. J. Roy. Statist. Soc. B 64, 855\u2013867 (2002)","DOI":"10.1111\/1467-9868.00365"},{"key":"9949_CR32","doi-asserted-by":"publisher","first-page":"989","DOI":"10.1198\/016214507000001328","volume":"103","author":"CJ Skinner","year":"2008","unstructured":"Skinner, C.J., Shlomo, N.: Assessing identification risk in survey microdata using log-linear models. J. Am. Stat. Assoc. 103, 989\u20131001 (2008)","journal-title":"J. Am. Stat. Assoc."},{"key":"9949_CR33","first-page":"31","volume":"10","author":"C Skinner","year":"1994","unstructured":"Skinner, C., Marsh, C., Openshaw, S., Wymer, C.: Disclosure control for census microdata. J. Off. Stat. 10, 31\u201351 (1994)","journal-title":"J. Off. Stat."},{"key":"9949_CR34","doi-asserted-by":"crossref","unstructured":"Smith, A.: Privacy-preserving statistical estimation with optimal convergence rates. In: Proceedings of the Forty-Third Annual ACM Symposium on the Theory of Computing (2011)","DOI":"10.1145\/1993636.1993743"},{"key":"9949_CR35","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1111\/j.1748-720X.1997.tb01885.x","volume":"25","author":"L Sweeney","year":"1997","unstructured":"Sweeney, L.: Waeving technology and policy together to maintain confidentiality. J. Law Med. Ethics 25, 98\u2013110 (1997)","journal-title":"J. Law Med. Ethics"},{"issue":"309","key":"9949_CR36","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1080\/01621459.1965.10480775","volume":"60","author":"S Warner","year":"1965","unstructured":"Warner, S.: Randomized response: a survey technique for eliminating evasive answer bias. J. Am. Stat. Assoc. 60(309), 63\u201369 (1965)","journal-title":"J. Am. Stat. Assoc."},{"key":"9949_CR37","unstructured":"Willnborg, L.: Optimization models for PRAM matrices. Report, Department of Statistical Methods, Statistics Netherlands (1999)"},{"key":"9949_CR38","doi-asserted-by":"crossref","unstructured":"Willenborg, L.: Optimality Models for PRAM. In: Proceedings Compstat 2000, Utrecht, 21\u201325 August, Physica, Heidelberg (2000)","DOI":"10.1007\/978-3-642-57678-2_71"},{"key":"9949_CR39","doi-asserted-by":"crossref","unstructured":"Willenborg, L., de Waal, T.: Elements of statistical disclosure control in practice. Lecture Notes in Statistics, vol. 155. Springer, New York (2001)","DOI":"10.1007\/978-1-4613-0121-9"}],"container-title":["Statistics and Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11222-020-09949-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11222-020-09949-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11222-020-09949-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,6]],"date-time":"2024-08-06T21:02:26Z","timestamp":1722978146000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11222-020-09949-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6,1]]},"references-count":39,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2020,9]]}},"alternative-id":["9949"],"URL":"https:\/\/doi.org\/10.1007\/s11222-020-09949-3","relation":{},"ISSN":["0960-3174","1573-1375"],"issn-type":[{"value":"0960-3174","type":"print"},{"value":"1573-1375","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,6,1]]},"assertion":[{"value":"8 August 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 May 2020","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 June 2020","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}