Minimax Optimal Procedures for Locally Private Estimation
Calibrating Noise to Sensitivity in Private Data Analysis