Skip to content
Sign in

What is Differential Privacy?

Differential privacy is a mathematical framework that adds controlled random noise to data or query results so that the inclusion or exclusion of any single individual's information has only a negligible effect on the output.

At its core, differential privacy guarantees that an observer cannot reliably tell whether a particular person's data was used in a computation. This is achieved by bounding the privacy loss with a parameter called epsilon, which controls how much noise is introduced.

Common mechanisms include adding noise drawn from distributions such as Laplace or Gaussian to aggregate statistics or during model training. The total amount of privacy loss is tracked with a privacy budget that limits how many queries or training steps can be performed.

Because the guarantee is probabilistic and holds regardless of an adversary's prior knowledge, differential privacy provides a formal, quantifiable notion of privacy that can be composed across multiple analyses.

Example

A hospital wants to release average patient ages by disease without revealing any individual's age. By adding a small amount of calibrated noise to each average, the published numbers remain statistically useful while ensuring that changing one patient's record would not noticeably alter the result.

Why it matters

As AI systems increasingly train on sensitive personal data, differential privacy offers a rigorous way to reduce re-identification risks and meet regulations such as GDPR while still enabling valuable model development.

Frequently asked questions

No; it provides a tunable mathematical guarantee rather than perfect anonymity, and some utility is usually traded for stronger privacy.