Ball Differential Privacy: How to Mitigate Data Reconstruction with Less Noise

Joseph Margaryan, Nirupam Gupta

Vector embeddings of raw records, while not human-readable, do not preserve record privacy: an adversary can reconstruct training records from a released model even when that model…