Effective-Sensitivity Correction for Correlated Multi-Output Gaussian Releases
Authors/Creators
Description
We prove an exact reduction formula for the ε-hockey-stick divergence when a Gaussian mechanism releases multiple correlated scalar outputs jointly observable by an adversary.
For a k-output mechanism M(D) = (f1(D) + Z1, . . . , fk(D) + Zk) with independent noise Zi ∼ N (0, σ2 ) and linear coupling fj(D) = cjf1(D), the log-likelihood ratio depends on the observations only through the scalar projection S(x) = c ⊤x/∥c∥2, which is a sufficient statistic for distinguishing adjacent datasets. This yields an isometric reduction: the privacy- loss distribution of M reduces to that of a scalar Gaussian mechanism (via sufficient statistic projection) with effective sensitivity ∆eff = ∆ ∥c∥2: Hε(M) = Hscalar ε (σ, ∆eff).
The result is exact within the model (linear coupling, independent noise, full-vector observa- tion) and requires no new accountant code. We verify the formula against the dp accounting.pld library (Google), confirm the baseline match at c = 0, and report gaps up to 2.26× at full coupling. We connect this to the GCI Sign Theorem of Paper #1, which provides the com- plementary result for correlated noise via sign(∂R/∂ρ|0) = sign(m1m2).
Files
GCI_Paper4_v1.0_FINAL.pdf
Files
(316.9 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:377127f965a9dbe292c26e1a2443ec7f
|
316.9 kB | Preview Download |
Additional details
Related works
- Is version of
- Preprint: 10.5281/zenodo.20078486 (DOI)
- Preprint: 10.5281/zenodo.20078649 (DOI)
Dates
- Submitted
-
2026-05-28
Software
- Repository URL
- https://github.com/google/differential-privacy/pull/430
- Programming language
- C++ , Python
References
- Sefirot. On the Failure of the GCI for Non-Centered Distributions. Zenodo Preprint, DOI: 10.5281/zenodo.20078486. 2026.
- Sefirot. Critical Correlation in Non-Centered Gaussian Vectors: The ρ*(r) Formula. Zenodo Preprint, DOI: 10.5281/zenodo.20078649. 2026.
- B. Balle, Y.-X. Wang. Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Composition. arXiv:1805.06530, 2018.
- A. Koskela, J. Jälkö, A. Honkela. Tight Differential Privacy for Discrete-Valued Mechanisms and for the Subsampled Gaussian Mechanism Using FFT. AISTATS 2021.
- S. Gopi, Y.-T. Lee, L. Wutschitz. Numerical Composition of Differential Privacy. NeurIPS 2021.
- Google. dp_accounting. https://github.com/google/differential-privacy/tree/main/python/dp_accounting