U.S. Census Bureau Drops Differential Privacy, Raises Real Questions

The Census Bureau banning noise infusion from its statistical products sounds like a technical footnote but the HN thread surfaced the actual stakes quickly. The argument for removing differential privacy is accuracy: adding noise to protect individual records makes the aggregate data less useful for research and policy. The argument against is that the current political environment around immigration enforcement makes individual-level data far more dangerous to publish than it was in prior decades.

Some commenters took the position that the data should simply be published in full with no coarsening, arguing privacy concerns are overblown. Others pushed back hard, noting that ICE already conducts door-to-door operations and that linkage attacks on 'anonymized' data are well understood by now. The two camps largely talked past each other.

The pattern here is that differential privacy, which was positioned as a solved technical problem, is now a political football. The decision to remove it was not made on technical grounds; it was made by an administration with specific enforcement priorities. That changes what the data infrastructure actually does.