Provably Private Data Anonymization: Or, k-Anonymity Meets Differential Privacy
Anonymization of Set-Valued Data via Top-Down, Local Generalization