blob: 72d018fbba4c05320a512b90e47e7717bb74bfaa [file] [log] [blame] [view]
# Confidence intervals in the Differential Privacy libraries
The mechanisms of the DP library (including the Laplace mechanism, the Gaussian
mechanism, count, bounded sum and bounded mean) provide confidence intervals to
capture the scale of the noise they add to a metric during the anonymization
process.
Given a noised metric **M** and a confidence level **1 - alpha**, the mechanisms
return confidence intervals **[L, R]** containing the raw metric **m** (where
**m** is the value after contribution bounding, but before applying noise) with
a probability of at least **1 - alpha**, i.e., **Pr[L m R] 1 - alpha**.
A particular confidence interval is purely based on **M** and non-personal
parameters of the respective mechanism, such as epsilon, delta, sensitivities
and contribution bounds. In particular, its computation does not access the raw
metric **m** and consequently it also does not consume any privacy budget.
## Contribution bounding
The confidence intervals provided by the library do not account for discrepancy
due to contribution bounding.
For instance, consider a bounded sum over the raw entries [5, 5, 10, 20] with a
lower bound of 0 and an upper bound of 10. The true sum is 40, but the bounded
sum is 30. In this case, a confidence interval will contain **m = 30** with the
respective confidence level. No guarantees whether the interval also contains
the true sum of 40 are given.