On the Theory and Practice of Privacy-Preserving Bayesian Data Analysis
Mechanism Design via Differential Privacy