<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.0 20120330//EN" "JATS-journalpublishing1.dtd">
<article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" article-type="research-article">
<front>
<journal-meta>
<journal-id journal-id-type="publisher-id">JDS</journal-id>
<journal-title-group><journal-title>Journal of Data Science</journal-title></journal-title-group>
<issn pub-type="epub">1683-8602</issn><issn pub-type="ppub">1680-743X</issn><issn-l>1680-743X</issn-l>
<publisher>
<publisher-name>School of Statistics, Renmin University of China</publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id pub-id-type="publisher-id">JDS1237</article-id>
<article-id pub-id-type="doi">10.6339/26-JDS1237</article-id>
<article-categories><subj-group subj-group-type="heading">
<subject>Statistical Data Science</subject></subj-group></article-categories>
<title-group>
<article-title>A Practical Guide to Differentially Private Deep Learning Using the Pseudo Posterior Mechanism</article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author">
<contrib-id contrib-id-type="orcid">https://orcid.org/0000-0002-7966-527X</contrib-id>
<name><surname>Preiss</surname><given-names>Alexander J.</given-names></name><email xlink:href="mailto:apreiss@rti.org">apreiss@rti.org</email><xref ref-type="aff" rid="j_jds1237_aff_001">1</xref><xref ref-type="corresp" rid="cor1">∗</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Konet</surname><given-names>Amanda</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_001">1</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Chew</surname><given-names>Robert</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_001">1</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Williams</surname><given-names>Matthew R.</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_002">2</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Segarra</surname><given-names>Elan A.</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_003">3</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Oh</surname><given-names>David H.</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_003">3</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Boon</surname><given-names>Erin</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_004">4</xref>
</contrib>
<contrib contrib-type="author">
<name><surname>Savitsky</surname><given-names>Terrance D.</given-names></name><xref ref-type="aff" rid="j_jds1237_aff_004">4</xref>
</contrib>
<aff id="j_jds1237_aff_001"><label>1</label>Research Triangle Park, NC 27709, <institution>RTI International</institution>, Department of AI, Data, and Product Engineering, <country>USA</country></aff>
<aff id="j_jds1237_aff_002"><label>2</label>Research Triangle Park, NC 27709, <institution>RTI International</institution>, Center for Official Statistics, <country>USA</country></aff>
<aff id="j_jds1237_aff_003"><label>3</label>Hillcrest Heights, MD 20746, <institution>U.S. Bureau of Labor Statistics</institution>, Office of Compensation and Working Conditions, <country>USA</country></aff>
<aff id="j_jds1237_aff_004"><label>4</label>Hillcrest Heights, MD 20746, <institution>U.S. Bureau of Labor Statistics</institution>, Office of Survey Methods Research, <country>USA</country></aff>
</contrib-group>
<author-notes>
<corresp id="cor1"><label>∗</label>Corresponding author. Email: <ext-link ext-link-type="uri" xlink:href="mailto:apreiss@rti.org">apreiss@rti.org</ext-link>.</corresp>
</author-notes>
<pub-date pub-type="ppub"><year>2026</year></pub-date><pub-date pub-type="epub"><day>9</day><month>6</month><year>2026</year></pub-date><volume content-type="ahead-of-print">0</volume><issue>0</issue><fpage>1</fpage><lpage>19</lpage><supplementary-material id="S1" content-type="archive" xlink:href="jds1237_s001.zip" mimetype="application" mime-subtype="x-zip-compressed">
<caption>
<title>Supplementary Material</title>
<p>Complete classification report with per-class metrics</p>
</caption>
</supplementary-material><history><date date-type="received"><day>9</day><month>9</month><year>2025</year></date><date date-type="accepted"><day>2</day><month>6</month><year>2026</year></date></history>
<permissions><copyright-statement>2026 The Author(s). Published by the School of Statistics and the Center for Applied Statistics, Renmin University of China.</copyright-statement><copyright-year>2026</copyright-year>
<license license-type="open-access" xlink:href="https://creativecommons.org/licenses/by/4.0/">
<license-p>Open access article under the <ext-link ext-link-type="uri" xlink:href="https://creativecommons.org/licenses/by/4.0/">CC BY</ext-link> license.</license-p></license></permissions>
<abstract>
<p>Privacy-preserving machine learning methods seek to train useful models that do not disclose information about the data on which they were trained. Such methods are vital when organizations train neural networks on sensitive individual-level data and seek to release the models publicly. Their goal poses a trade-off between predictive performance (utility) and privacy protection. That trade-off makes privacy-preserving machine learning methods difficult to apply in practice, usually requiring extensive iteration and hyperparameter tuning. Yet, practitioners often have little guidance for navigating competing statistical, computational, and privacy demands. We present an implementation algorithm for the Stochastic Weight Averaging–Gaussian Pseudo Posterior Mechanism (SWAG-PPM), a Bayesian differentially private deep learning method. The implementation algorithm focuses on the joint tuning of two key hyperparameters whose interaction governs model convergence and the privacy–utility trade-off. We introduce novel diagnostic tools to evaluate convergence and guide hyperparameter adjustments. Using a transformer model for occupational injury classification, we demonstrate that diagnostic-guided tuning with SWAG-PPM can achieve strong privacy protection and utility. While our case study uses a specific dataset and model architecture, all methodological steps can apply to other settings where privacy risk is heterogeneously distributed.</p>
</abstract>
<kwd-group>
<label>Keywords</label>
<kwd>Bayesian deep learning</kwd>
<kwd>differential Privacy</kwd>
<kwd>imbalanced learning</kwd>
<kwd>official statistics</kwd>
<kwd>pseudo posterior distribution</kwd>
</kwd-group>
</article-meta>
</front>
<back>
<ref-list id="j_jds1237_reflist_001">
<title>References</title>
<ref id="j_jds1237_ref_001">
<mixed-citation publication-type="chapter"> <string-name><surname>Abadi</surname> <given-names>M</given-names></string-name>, <string-name><surname>Chu</surname> <given-names>A</given-names></string-name>, <string-name><surname>Goodfellow</surname> <given-names>I</given-names></string-name>, <string-name><surname>McMahan</surname> <given-names>HB</given-names></string-name>, <string-name><surname>Mironov</surname> <given-names>I</given-names></string-name>, ..., <string-name><surname>Zhang</surname> <given-names>L</given-names></string-name> (<year>2016</year>). <chapter-title>Deep learning with differential privacy</chapter-title>. In: <source><italic>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security</italic></source> (<string-name><given-names>E</given-names> <surname>Weippl</surname></string-name>, <string-name><given-names>S</given-names> <surname>Katzenbeisser</surname></string-name>, <string-name><given-names>C</given-names> <surname>Kruegel</surname></string-name>, <string-name><given-names>A</given-names> <surname>Myers</surname></string-name> and <string-name><given-names>S</given-names> <surname>Halevi</surname></string-name>, eds.), <fpage>308</fpage>–<lpage>318</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_002">
<mixed-citation publication-type="other"> <string-name><surname>Aktay</surname> <given-names>A</given-names></string-name>, <string-name><surname>Bavadekar</surname> <given-names>S</given-names></string-name>, <string-name><surname>Cossoul</surname> <given-names>G</given-names></string-name>, <string-name><surname>Davis</surname> <given-names>J</given-names></string-name>, <string-name><surname>Desfontaines</surname> <given-names>D</given-names></string-name>, ..., <string-name><surname>Wilson</surname> <given-names>RJ</given-names></string-name> (<year>2020</year>). Google COVID-19 community mobility reports: Anonymization process description (version 1.1).</mixed-citation>
</ref>
<ref id="j_jds1237_ref_003">
<mixed-citation publication-type="book"> <string-name><surname>Apple Inc</surname></string-name> (<year>2017</year>). <source><italic>Differential Privacy Overview. White Paper</italic></source>. <publisher-name>Apple Inc.</publisher-name>, <publisher-loc>Cupertino, CA</publisher-loc>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_004">
<mixed-citation publication-type="journal"> <string-name><surname>Bischl</surname> <given-names>B</given-names></string-name>, <string-name><surname>Binder</surname> <given-names>M</given-names></string-name>, <string-name><surname>Lang</surname> <given-names>M</given-names></string-name>, <string-name><surname>Pielok</surname> <given-names>T</given-names></string-name>, <string-name><surname>Richter</surname> <given-names>J</given-names></string-name>, ..., <string-name><surname>Lindauer</surname> <given-names>M</given-names></string-name> (<year>2023</year>). <article-title>Hyperparameter optimization: Foundations, algorithms, best practices, and open challenges</article-title>. <source><italic>Wiley Interdisciplinary Reviews: Data Mining and Knowledge Discovery</italic></source>, <volume>13</volume>(<issue>2</issue>): <elocation-id>e1484</elocation-id>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_005">
<mixed-citation publication-type="chapter"> <string-name><surname>Carlini</surname> <given-names>N</given-names></string-name>, <string-name><surname>Ippolito</surname> <given-names>D</given-names></string-name>, <string-name><surname>Jagielski</surname> <given-names>M</given-names></string-name>, <string-name><surname>Lee</surname> <given-names>K</given-names></string-name>, <string-name><surname>Tramer</surname> <given-names>F</given-names></string-name>, <string-name><surname>Zhang</surname> <given-names>C</given-names></string-name> (<year>2022</year>). <chapter-title>Quantifying memorization across neural language models</chapter-title>. In: <source><italic>The Eleventh International Conference on Learning Representations</italic></source>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_006">
<mixed-citation publication-type="book"> <string-name><surname>Chew</surname> <given-names>R</given-names></string-name> (<year>2025</year>). <source><italic>OSHA Severe Injury Reports: Jan 2015 - Sep 2023</italic></source>. <ext-link ext-link-type="doi" xlink:href="https://doi.org/10.6084/m9.figshare.28669604.v1" xlink:type="simple">https://doi.org/10.6084/m9.figshare.28669604.v1</ext-link></mixed-citation>
</ref>
<ref id="j_jds1237_ref_007">
<mixed-citation publication-type="other"> <string-name><surname>Chew</surname> <given-names>R</given-names></string-name>, <string-name><surname>Williams</surname> <given-names>MR</given-names></string-name>, <string-name><surname>Segarra</surname> <given-names>EA</given-names></string-name>, <string-name><surname>Preiss</surname> <given-names>AJ</given-names></string-name>, <string-name><surname>Konet</surname> <given-names>A</given-names></string-name>, <string-name><surname>Savitsky</surname> <given-names>TD</given-names></string-name> (<year>2025</year>). Bayesian pseudo posterior mechanism for differentially private machine learning. arXiv preprint: arXiv:<ext-link ext-link-type="uri" xlink:href="https://arxiv.org/abs/2503.21528">2503.21528</ext-link>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_008">
<mixed-citation publication-type="chapter"> <string-name><surname>Devlin</surname> <given-names>J</given-names></string-name>, <string-name><surname>Chang</surname> <given-names>MW</given-names></string-name>, <string-name><surname>Lee</surname> <given-names>K</given-names></string-name>, <string-name><surname>Toutanova</surname> <given-names>K</given-names></string-name> (<year>2019</year>). <chapter-title>Bert: Pre-training of deep bidirectional transformers for language understanding</chapter-title>. In: <source><italic>Proceedings of NAACL-HLT</italic></source> (<string-name><given-names>J</given-names> <surname>Burstein</surname></string-name>, <string-name><given-names>C</given-names> <surname>Doran</surname></string-name> and <string-name><given-names>T</given-names> <surname>Solorio</surname></string-name>, eds.),</mixed-citation>
</ref>
<ref id="j_jds1237_ref_009">
<mixed-citation publication-type="chapter"> <string-name><surname>Dwork</surname> <given-names>C</given-names></string-name> (<year>2006</year>). <chapter-title>Differential privacy</chapter-title>. In: <source><italic>International Colloquium on Automata, Languages, and Programming</italic></source> (<string-name><given-names>M</given-names> <surname>Bugliesi</surname></string-name>, <string-name><given-names>B</given-names> <surname>Preneel</surname></string-name>, <string-name><given-names>V</given-names> <surname>Sassone</surname></string-name> and <string-name><given-names>I</given-names> <surname>Wegener</surname></string-name>, eds.), <fpage>1</fpage>–<lpage>12</lpage>. <publisher-name>Springer</publisher-name>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_010">
<mixed-citation publication-type="journal"> <string-name><surname>Dwork</surname> <given-names>C</given-names></string-name>, <string-name><surname>Kohli</surname> <given-names>N</given-names></string-name>, <string-name><surname>Mulligan</surname> <given-names>D</given-names></string-name> (<year>2019</year>). <article-title>Differential privacy in practice: Expose your epsilons!</article-title> <source><italic>Journal of Privacy and Confidentiality</italic></source>, <volume>9</volume>(<issue>2</issue>). <ext-link ext-link-type="doi" xlink:href="https://doi.org/10.29012/jpc.689" xlink:type="simple">https://doi.org/10.29012/jpc.689</ext-link></mixed-citation>
</ref>
<ref id="j_jds1237_ref_011">
<mixed-citation publication-type="book"> <string-name><surname>Google Research</surname></string-name> (<year>2024</year>). <source><italic>Advances in Private Training for Production on-Device Language Models. Blog Post</italic></source>. <publisher-name>Google Research</publisher-name>, <publisher-loc>Mountain View, CA</publisher-loc>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_012">
<mixed-citation publication-type="chapter"> <string-name><surname>Hod</surname> <given-names>S</given-names></string-name>, <string-name><surname>Canetti</surname> <given-names>R</given-names></string-name> (<year>2025</year>). <chapter-title>Differentially private release of Israel’s national registry of live births</chapter-title>. In: <source><italic>2025 IEEE Symposium on Security and Privacy (SP)</italic></source>, <fpage>3912</fpage>–<lpage>3930</lpage>. <publisher-name>IEEE</publisher-name>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_013">
<mixed-citation publication-type="other"> <string-name><surname>Howarth</surname> <given-names>G</given-names></string-name>, <string-name><surname>Altman</surname> <given-names>M</given-names></string-name>, <string-name><surname>Ayalde</surname> <given-names>S</given-names></string-name>, <string-name><surname>Ghazi</surname> <given-names>E</given-names></string-name>, <string-name><surname>McCallum</surname> <given-names>C</given-names></string-name>, ..., <string-name><surname>Near</surname> <given-names>J</given-names></string-name> (<year>2025</year>). A community-driven differential privacy deployment registry, <italic>Technical Report NIST Internal or Interagency Report (NISTIR) 8588</italic>, (Draft), National Institute of Standards and Technology.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_014">
<mixed-citation publication-type="chapter"> <string-name><surname>Hsu</surname> <given-names>J</given-names></string-name>, <string-name><surname>Gaboardi</surname> <given-names>M</given-names></string-name>, <string-name><surname>Haeberlen</surname> <given-names>A</given-names></string-name>, <string-name><surname>Khanna</surname> <given-names>S</given-names></string-name>, <string-name><surname>Narayan</surname> <given-names>A</given-names></string-name>, ..., <string-name><surname>Roth</surname> <given-names>A</given-names></string-name> (<year>2014</year>). <chapter-title>Differential privacy: An economic method for choosing epsilon</chapter-title>. In: <source><italic>2014 IEEE 27th Computer Security Foundations Symposium</italic></source>, <fpage>398</fpage>–<lpage>410</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_015">
<mixed-citation publication-type="other"> <string-name><surname>Hu</surname> <given-names>J</given-names></string-name>, <string-name><surname>Williams</surname> <given-names>MR</given-names></string-name>, <string-name><surname>Savitsky</surname> <given-names>TD</given-names></string-name> (<year>2022</year>). Mechanisms for global differential privacy under bayesian data synthesis. arXiv preprint: arXiv:<ext-link ext-link-type="uri" xlink:href="https://arxiv.org/abs/2205.05003">2205.05003</ext-link>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_016">
<mixed-citation publication-type="chapter"> <string-name><surname>Liu</surname> <given-names>J</given-names></string-name>, <string-name><surname>Talwar</surname> <given-names>K</given-names></string-name> (<year>2019</year>). <chapter-title>Private selection from private candidates</chapter-title>. In: <source><italic>Proceedings of the 51st Annual ACM SIGACT Symposium on Theory of Computing</italic></source> (<string-name><given-names>M</given-names> <surname>Charikar</surname></string-name> and <string-name><given-names>E</given-names> <surname>Cohen</surname></string-name>, eds.), <fpage>298</fpage>–<lpage>309</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_017">
<mixed-citation publication-type="chapter"> <string-name><surname>Liu</surname> <given-names>Z</given-names></string-name>, <string-name><surname>Lin</surname> <given-names>W</given-names></string-name>, <string-name><surname>Shi</surname> <given-names>Y</given-names></string-name>, <string-name><surname>Zhao</surname> <given-names>J</given-names></string-name> (<year>2021</year>). <chapter-title>A robustly optimized bert pre-training approach with post-training</chapter-title>. In: <source><italic>China National Conference on Chinese Computational Linguistics</italic></source> (<string-name><given-names>S</given-names> <surname>Li</surname></string-name>, <string-name><given-names>M</given-names> <surname>Sun</surname></string-name>, <string-name><given-names>Y</given-names> <surname>Liu</surname></string-name>, <string-name><given-names>H</given-names> <surname>Wu</surname></string-name>, <string-name><given-names>K</given-names> <surname>Liu</surname></string-name>, <string-name><given-names>W</given-names> <surname>Che</surname></string-name>, <string-name><given-names>S</given-names> <surname>He</surname></string-name> and <string-name><given-names>G</given-names> <surname>Rao</surname></string-name>, eds.), <fpage>471</fpage>–<lpage>484</lpage>. <publisher-name>Springer</publisher-name>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_018">
<mixed-citation publication-type="journal"> <string-name><surname>Maddox</surname> <given-names>WJ</given-names></string-name>, <string-name><surname>Izmailov</surname> <given-names>P</given-names></string-name>, <string-name><surname>Garipov</surname> <given-names>T</given-names></string-name>, <string-name><surname>Vetrov</surname> <given-names>DP</given-names></string-name>, <string-name><surname>Wilson</surname> <given-names>AG</given-names></string-name> (<year>2019</year>). <article-title>A simple baseline for bayesian uncertainty in deep learning</article-title>. <source><italic>Advances in Neural Information Processing Systems</italic></source>, <volume>32</volume>: <fpage>13153</fpage>–<lpage>13164</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_019">
<mixed-citation publication-type="journal"> <string-name><surname>Mandt</surname> <given-names>S</given-names></string-name>, <string-name><surname>Hoffman</surname> <given-names>MD</given-names></string-name>, <string-name><surname>Blei</surname> <given-names>DM</given-names></string-name> (<year>2017</year>). <article-title>Stochastic gradient descent as approximate Bayesian inference</article-title>. <source><italic>Journal of Machine Learning Research</italic></source>, <volume>18</volume>(<issue>134</issue>): <fpage>1</fpage>–<lpage>35</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_020">
<mixed-citation publication-type="chapter"> <string-name><surname>Nasr</surname> <given-names>M</given-names></string-name>, <string-name><surname>Songi</surname> <given-names>S</given-names></string-name>, <string-name><surname>Thakurta</surname> <given-names>A</given-names></string-name>, <string-name><surname>Papernot</surname> <given-names>N</given-names></string-name>, <string-name><surname>Carlin</surname> <given-names>N</given-names></string-name> (<year>2021</year>). <chapter-title>Adversary instantiation: Lower bounds for differentially private machine learning</chapter-title>. In: <source><italic>2021 IEEE Symposium on Security and Privacy (SP)</italic></source>, <fpage>866</fpage>–<lpage>882</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_021">
<mixed-citation publication-type="other"> <string-name><surname>Near</surname> <given-names>J</given-names></string-name>, <string-name><surname>Darais</surname> <given-names>D</given-names></string-name>, <string-name><surname>Lefkovitz</surname> <given-names>N</given-names></string-name>, <string-name><surname>Howarth</surname> <given-names>G</given-names></string-name> (<year>2025</year>). Guidelines for evaluating differential privacy guarantees, <italic>Technical Report NIST.SP.800-226</italic>, National Institute of Standards and Technology.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_022">
<mixed-citation publication-type="journal"> <string-name><surname>Rigaki</surname> <given-names>M</given-names></string-name>, <string-name><surname>Garcia</surname> <given-names>S</given-names></string-name> (<year>2024</year>). <article-title>A survey of privacy attacks in machine learning</article-title>. <source><italic>ACM Computing Surveys</italic></source>, <volume>56</volume>(<issue>4</issue>): <fpage>1</fpage>–<lpage>34</lpage>. <ext-link ext-link-type="doi" xlink:href="https://doi.org/10.1145/3624010" xlink:type="simple">https://doi.org/10.1145/3624010</ext-link></mixed-citation>
</ref>
<ref id="j_jds1237_ref_023">
<mixed-citation publication-type="journal"> <string-name><surname>Savitsky</surname> <given-names>TD</given-names></string-name>, <string-name><surname>Williams</surname> <given-names>MR</given-names></string-name>, <string-name><surname>Hu</surname> <given-names>J</given-names></string-name> (<year>2022</year>). <article-title>Bayesian pseudo posterior mechanism under asymptotic differential privacy</article-title>. <source><italic>Journal of Machine Learning Research</italic></source>, <volume>23</volume>(<issue>55</issue>): <fpage>1</fpage>–<lpage>37</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_024">
<mixed-citation publication-type="chapter"> <string-name><surname>Shokri</surname> <given-names>R</given-names></string-name>, <string-name><surname>Stronati</surname> <given-names>M</given-names></string-name>, <string-name><surname>Song</surname> <given-names>C</given-names></string-name>, <string-name><surname>Shmatikov</surname> <given-names>V</given-names></string-name> (<year>2017</year>). <chapter-title>Membership inference attacks against machine learning models</chapter-title>. In: <source><italic>2017 IEEE Symposium on Security and Privacy (SP)</italic></source>, <fpage>3</fpage>–<lpage>18</lpage>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_025">
<mixed-citation publication-type="chapter"> <string-name><surname>Stadler</surname> <given-names>T</given-names></string-name>, <string-name><surname>Oprisanu</surname> <given-names>B</given-names></string-name>, <string-name><surname>Troncoso</surname> <given-names>C</given-names></string-name> (<year>2022</year>). <chapter-title>Synthetic data – anonymisation groundhog day</chapter-title>. In: <source><italic>31st USENIX Security Symposium (USENIX Security</italic></source>, volume <volume>22</volume>, <fpage>1451</fpage>–<lpage>1468</lpage>. <publisher-name>USENIX Association</publisher-name>, <publisher-loc>Boston, MA</publisher-loc>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_026">
<mixed-citation publication-type="other"> <string-name><surname>US Bureau of Labor Statistics</surname></string-name> (<year>2025</year>). Automated coding of injury and illness data. White paper.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_027">
<mixed-citation publication-type="book"> <string-name><surname>US Census Bureau</surname></string-name> (<year>2021</year>). <source><italic>Census Bureau Sets Key Parameters to Protect Privacy in 2020 Census Results</italic></source> <series><italic>Press Release</italic></series>. <publisher-name>U.S. Census Bureau</publisher-name>.</mixed-citation>
</ref>
<ref id="j_jds1237_ref_028">
<mixed-citation publication-type="chapter"> <string-name><surname>Vaswani</surname> <given-names>A</given-names></string-name>, <string-name><surname>Shazeer</surname> <given-names>N</given-names></string-name>, <string-name><surname>Parmar</surname> <given-names>N</given-names></string-name>, <string-name><surname>Uszkoreit</surname> <given-names>J</given-names></string-name>, <string-name><surname>Jones</surname> <given-names>L</given-names></string-name>, ..., <string-name><surname>Polosukhin</surname> <given-names>I</given-names></string-name> (<year>2017</year>). <chapter-title>Attention is all you need</chapter-title>. In: <source><italic>Advances in Neural Information Processing Systems</italic></source> (<string-name><given-names>I</given-names> <surname>Guyon</surname></string-name>, <string-name><given-names>U</given-names> <surname>Von Luxburg</surname></string-name>, <string-name><given-names>S</given-names> <surname>Benigo</surname></string-name>, <string-name><given-names>H</given-names> <surname>Wallach</surname></string-name>, <string-name><given-names>R</given-names> <surname>Fergus</surname></string-name>, <string-name><given-names>S</given-names> <surname>Viswanathan</surname></string-name> and <string-name><given-names>R</given-names> <surname>Garnett</surname></string-name>, eds.), volume <volume>30</volume>.</mixed-citation>
</ref>
</ref-list>
</back>
</article>
