This paper analyzes the privacy of traditional Statistical Disclosure Control (SDC) systems under a differential privacy interpretation. SDCs, such as cell suppression and swapping, promise to safeguard the confidentiality of data and are routinely adopted in data analyses with profound societal and economic impacts. Through a formal analysis and empirical evaluation of demographic data from real households in the U.S., the paper shows that widely adopted SDC systems not only induce vastly larger privacy losses than classical differential privacy mechanisms, but, they may also come at a cost of larger accuracy and fairness.
Paperid:2444
Authors:Scott L. Fleming, Alejandro Lozano, William J. Haberkorn, Jenelle A. Jindal, Eduardo Reis, Rahul Thapa, Louis Blankemeier, Julian Z. Genkins, Ethan Steinberg, Ashwin Nayak, Birju Patel, Chia-Chun Chiang, Alison Callahan, Zepeng Huo, Sergios Gatidis, Scott Adams, Oluseyi Fayanju, Shreya J. Shah, Thomas Savage, Ethan Goh, Akshay S. Chaudhari, Nima Aghaeepour, Christopher Sharp, Michael A. Pfeffer, Percy Liang, Jonathan H. Chen, Keith E. Morse, Emma P. Brunskill, Jason A. Fries, Nigam H. Shah
Department of Biomedical Data Science, Stanford School of Medicine, Stanford, CA, USA
Department of Computer Science, Stanford School of Engineering, Stanford, CA, USA, Department of Biomedical Data Science, Stanford School of Medicine, Stanford, CA, USA, Department of Anesthesiology, Peri-operative, and Pain Medicine, Stanford School of Medicine, Stanford, CA, USA
Department of Pediatrics, Stanford School of Medicine, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA, Department of Radiology, Stanford School of Medicine, Stanford, CA, USA
Center for Artificial Intelligence in Medicine and Imaging (AIMI), Stanford University, Stanford, CA, USA
Hospital Israelita Albert Einstein, Sao Paulo, SP, Brazil, Technology and Digital Solutions, Stanford Health Care, Palo Alto, CA, USA, Department of Electrical Engineering, Stanford School of Engineering, Stanford, CA, Department of Medicine, Vanderbilt University School of Medicine, Nashville, TN, USA
Department of Biomedical Informatics, Vanderbilt University Medical Center, Nashville, TN, USA, Department of Computer Science, Stanford School of Engineering, Stanford, CA, USA
Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA, Department of Medicine, Stanford School of Medicine, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA, Department of Neurology, Mayo Clinic, Rochester, MN, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA
Department of Medicine, Stanford School of Medicine, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA, Department of Radiology, Stanford School of Medicine, Stanford, CA, USA, Department of Radiology, Stanford School of Medicine, Stanford, CA, USA, Department of Medicine, Stanford School of Medicine, Stanford, CA, USA, Department of Medicine, Stanford School of Medicine, Stanford, CA, USA, Department of Biomedical Data Science, Stanford School of Medicine, Stanford, CA, USA
Division of Hospital Medicine, Stanford University, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA
Clinical Excellence Research Center, Stanford School of Medicine, Stanford, CA, USA, Department of Biomedical Data Science, Stanford School of Medicine, Stanford, CA, USA
Department of Radiology, Stanford School of Medicine, Stanford, CA, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA, Department of Biomedical Data Science, Stanford School of Medicine, Stanford, CA, USA
Department of Anesthesiology, Peri-operative, and Pain Medicine, Stanford School of Medicine, Stanford, CA, USA
Department of Pediatrics, Stanford School of Medicine, Stanford, CA, USA, Department of Medicine, Stanford School of Medicine, Stanford, CA, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA, Technology and Digital Solutions, Stanford Health Care, Palo Alto, CA, USA
Department of Medicine, Stanford School of Medicine, Stanford, CA, USA, Department of Computer Science, Stanford School of Engineering, Stanford, CA, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA
Division of Hospital Medicine, Stanford University, Stanford, CA, USA
Clinical Excellence Research Center, Stanford School of Medicine, Stanford, CA, USA, Department of Pediatrics, Stanford School of Medicine, Stanford, CA, USA, Department of Computer Science, Stanford School of Engineering, Stanford, CA, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA, Stanford Center for Biomedical Informatics Research, Stanford University, Stanford, CA, USA, Technology and Digital Solutions, Stanford Health Care, Palo Alto, CA, USA
Department of Medicine, Stanford School of Medicine, Stanford, CA, USA
Human-Centered Artificial Intelligence Institute, Stanford University, Stanford, CA, USA
Clinical Excellence Research Center, Stanford School of Medicine, Stanford, CA, USA