Confidence intervals in the Differential Privacy libraries

The mechanisms of the DP library (including the Laplace mechanism, the Gaussian mechanism, count, bounded sum and bounded mean) provide confidence intervals to capture the scale of the noise they add to a metric during the anonymization process.

Given a noised metric M and a confidence level 1 - alpha, the mechanisms return confidence intervals [L, R] containing the raw metric m (where m is the value after contribution bounding, but before applying noise) with a probability of at least 1 - alpha, i.e., Pr[L ≤ m ≤ R] ≥ 1 - alpha.

A particular confidence interval is purely based on M and non-personal parameters of the respective mechanism, such as epsilon, delta, sensitivities and contribution bounds. In particular, its computation does not access the raw metric m and consequently it also does not consume any privacy budget.

Contribution bounding

The confidence intervals provided by the library do not account for discrepancy due to contribution bounding.

For instance, consider a bounded sum over the raw entries [5, 5, 10, 20] with a lower bound of 0 and an upper bound of 10. The true sum is 40, but the bounded sum is 30. In this case, a confidence interval will contain m = 30 with the respective confidence level. No guarantees whether the interval also contains the true sum of 40 are given.