Successful de-anonymizing incidents:
Providing aggregate statistical information about the data may reveal information about the individuals.
Formalize privacy in statistical databases protects against these kinds of de-anonymization techniques.
Dwork & Roth 2014
Dwork & Roth 2014
Possible world where I submit a survey
Possible world where I
do not submit
a survey
Result R
Prob(R) = A
Prob(R) = B
\[A \approx B\]