Differential privacy ERM