Post-processing immunity is a fundamental property of differential privacy:
it enables arbitrary data-independent transformations to differentially private
outputs without affecting their privacy guarantees. Post-processing is
routinely applied in data-release applications, including census data, which
are then used to make allocations with substantial societal impacts. This paper
shows that post-processing causes disparate impacts on individuals or groups
and analyzes two critical settings: the release of differentially private
datasets and the use of such private datasets for downstream decisions, such as
the allocation of funds informed by US Census data. In the first setting, the
paper proposes tight bounds on the unfairness of traditional post-processing
mechanisms, giving a unique tool to decision-makers to quantify the disparate
impacts introduced by their release. In the second setting, this paper proposes
a novel post-processing mechanism that is (approximately) optimal under
different fairness metrics, either reducing fairness issues substantially or
reducing the cost of privacy. The theoretical analysis is complemented with
numerical simulations on Census data.

本研究探讨了不同隐私保护机制中，后处理免疫性质的影响，并分析了在美国人口普查数据分配基金等重大社会决策中，后处理机制引起的不公平影响，提出了一种新的后处理机制，旨在减少公平问题和隐私保护成本。