stat.MLOct 14, 2026

On Inherent Privacy of Posterior Sampling: A Unified Rényi-Divergence Framework

Authors: Ruyu Zhou, Fang Liu

Organizations: Department of Computer Science and Statistics University of Rhode Island · Department of ACMS University of Notre Dame

Abstract

Differential Privacy (DP) provides a rigorous framework for quantifying privacy guarantees. While most methods achieve DP by injecting calibrated random noise, the intrinsic randomness of certain procedures such as sampling can yield DP guarantees ``for free''. In this work, we develop a unified Rényi divergence framework to characterize the inherent DP guarantees of sampling from a Bayesian posterior distribution. We show that the privacy loss incurred by One-Posterior-Sampling (OPS) is governed by posterior exponential moments of the single-record log-likelihood ratio, and establish explicit DP guarantees under uniformly bounded, sub-Gaussian, or sub-exponential tail regimes. We apply the framework to representative Bayesian models, including categorical likelihoods with arbitrary priors, Gaussian-Gaussian conjugate pair, generalized linear models from the exponential family and linear regression with Gaussian likelihood, both with Gaussian priors on the regression coefficients. Our results elucidate sample size, model structure, neighboring relations in DP (bounded or unbounded), and how prior if applicable, jointly determine the inherent DP guarantees of OPS. Furthermore, our results recover the existing DP guarantees for OPS as special cases -- often with tighter privacy loss bounds -- and substantially broaden the class of Bayesian models for which the inherent DP guarantees of OPS can be rigorously characterized.

Explore similar work

CardsList
  1. Differential Privacy of Gaussian Process Posterior Sampling

    Jun 16, 2026Tomasz MaciazekGaussian ProcessesPrivacy-Preserving ML

  2. Can Rényi Accountants Beat Lossless Accountants for DP-SGD?

    Oct 12, 2026Jinho BokDifferential PrivacyDifferentially Private Stochastic Gradient Descent

  3. Noise-Aware Differentially Private Variational Inference

    Oct 25, 2024Talal Alrawajfeh, Joonas Jälkö, Antti HonkelaBayesian InferenceDifferential Privacy