The Privacy Funnel from the Viewpoint of Local Differential Privacy

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

11 Downloads (Pure)


In the Open Data approach, governments want to share their datasets with the public, for accountability and to support participation. Data must be opened in such a way that individual privacy is safeguarded. The Privacy Funnel is a mathematical approach that produces a sanitised database that does not leak private data beyond a chosen threshold. The downsides to this approach are that it does not give worst-case privacy guarantees, and that finding optimal sanitisation protocols can be computationally prohibitive. We tackle these problems by using differential privacy metrics, and by considering local protocols which operate on one entry at a time. We show that under both the Local Differential Privacy and Local Information Privacy leakage metrics, one can efficiently obtain optimal protocols; however, Local Information Privacy is both more closely aligned to the privacy requirements of the Privacy Funnel scenario, and more efficiently computable. We also consider the scenario where each user has multiple attributes, for which we define Side-channel Resistant Local Information Privacy, and we give efficient methods to find protocols satisfying this criterion while still offering good utility. Exploratory experiments confirm the validity of these methods.
Original languageEnglish
Title of host publicationICDS 2020, The Fourteenth International Conference on Digital Society
Number of pages6
ISBN (Electronic)978-1-61208-760-3
Publication statusPublished - 22 Mar 2020
Externally publishedYes
Event14th International Conference on Digital Society, ICDS 2020 - Vitual Event
Duration: 21 Nov 202025 Nov 2020
Conference number: 14


Conference14th International Conference on Digital Society, ICDS 2020
Abbreviated titleICDS 2020
CityVitual Event


Dive into the research topics of 'The Privacy Funnel from the Viewpoint of Local Differential Privacy'. Together they form a unique fingerprint.

Cite this