[39] Naoise Holohan, Stefano Braghin, Pól Mac Aonghusa, and Killian Levacher. Diffprivlib: the ibm differential privacy library. arXiv preprint arXiv:1907.02444, 2019.
[40] Antti Honkela, Mrinal Das, Arttu Nieminen, Onur Dikmen, and Samuel Kaski. Efficient differentially private learning improves drug sensitivity prediction. *Biology direct*, 13:1–12, 2018.
[41] Peter J Huber and EM Ronchetti. Robust statistics, series in probability and mathematical statistics, 1981.
[42] Aapo Hyvarinen. Estimation of non-normalized statistical models by score matching. Journal of Machine Learning Research, 6(Apr):695-709, 2005.
[43] Matthew Jagielski, Jonathan Ullman, and Alina Oprea. Auditing differentially private machine learning: How private is private sgd? Advances in Neural Information Processing Systems, 33: 22205-22216, 2020.
[44] Joonas Jälkö, Onur Dikmen, and Antti Honkela. Differentially private variational inference for non-conjugate models. arXiv preprint arXiv:1610.08749, 2016.
[45] Jack Jewson, Jim Smith, and Chris Holmes. Principles of Bayesian inference using general divergence criteria. Entropy, 20(6):442, 2018.
[46] Jack Jewson, Jim Q Smith, and Chris Holmes. On the stability of general Bayesian inference. arXiv preprint arXiv:2301.13701, 2023.
[47] Jeremias Knblauch, Jack Jewson, and Theodoros Damoulas. Doubly robust Bayesian inference for non-stationary streaming data using  $\beta$ -divergences. In Advances in Neural Information Processing Systems (NeurIPS), pages 64-75, 2018.
[48] Jeremias Knoblach, Jack Jewson, and Theodoros Damoulas. An optimization-centric view on Bayes' rule: Reviewing and generalizing variational inference. Journal of Machine Learning Research, 23(132):1-109, 2022.
[49] Hyeyoung Ko, Suyeon Lee, Yoonseo Park, and Anna Choi. A survey of recommendation systems: recommendation models, techniques, and application fields. *Electronics*, 11(1):141, 2022.
[50] Michael R Kosorok. Introduction to empirical processes and semiparametric inference. Springer, 2008.
[51] Tejas Kulkarni, Joonas Jälkö, Antti Koskela, Samuel Kaski, and Antti Honkela. Differentially private Bayesian inference for generalized linear models. In International Conference on Machine Learning, pages 5838-5849. PMLR, 2021.
[52] Solomon Kullback and Richard A Leibler. On information and sufficiency. The annals of mathematical statistics, 22(1):79-86, 1951.
[53] Sebastian Kurtek and Karthik Bharath. Bayesian sensitivity analysis with the fisher-rao metric. Biometrika, 102(3):601-616, 2015.
[54] Anthony Lee, Arnaud Doucet, and Krzysztof Latuszyński. Perfect simulation using atomic regeneration with application to sequential Monte Carlo. arXiv preprint arXiv:1407.5770, 2014.
[55] Jing Lei. Differentially private m-estimators. Advances in Neural Information Processing Systems, 24, 2011.
[56] Bai Li, Changyou Chen, Hao Liu, and Lawrence Carin. On connecting stochastic gradient MCMC and differential privacy. In The 22nd International Conference on Artificial Intelligence and Statistics, pages 557-566. PMLR, 2019.
[57] Mengchu Li, Thomas B Berrett, and Yi Yu. On robustness and local differential privacy. arXiv preprint arXiv:2201.00751, 2022.
[58] Mengchu Li, Thomas B Berrett, and Yi Yu. On robustness and local differential privacy. The Annals of Statistics, 51(2):717-737, 2023.