Purifying Approximate Differential Privacy with Randomized Post-processing

Yu-Xiang Wang (UCSD) · Yingyu Lin (UC San Diego) · Erchi Wang (University of California, San Diego) · Yian Ma (UC San Diego)
$(\varepsilon$(\varepsilon'0)$-pure dp\delta)$-approximate dpcalibrated noisecomputationally efficient reductiondifferential privacydifferentially private empirical risk minimizationlower boundsprivacy-utility tradeoffpropose-test-releasepure dp algorithmspurificationquery releaserandomized post-processingstability-based releasestatistically efficient reductionstrong composition

We propose a framework to convert $(\varepsilon, \delta)$-approximate Differential Privacy (DP) mechanisms into $(\varepsilon', 0)$-pure DP mechanisms under certain conditions, a process we call ``purification.'' This algorithmic technique leverages randomized post-processing with calibrated noise to eliminate the $\delta$ parameter while achieving near-optimal privacy-utility tradeoff for pure DP. It enables a new design strategy for pure DP algorithms: first run an approximate DP algorithm with certain conditions, and then purify. This approach allows one to leverage techniques such as strong composition and propose-test-release that require $\delta>0$ in designing pure-DP methods with $\delta=0$. We apply this framework in various settings, including Differentially Private Empirical Risk Minimization (DP-ERM), stability-based release, and query release tasks. To the best of our knowledge, this is the first work with a statistically and computationally efficient reduction from approximate DP to pure DP. Finally, we illustrate the use of this reduction for proving lower bounds under approximate DP constraints with explicit dependence in $\delta$, avoiding the sophisticated fingerprinting code construction.