Differential privacy
The probability of getting any particular output from the algorithm should be nearly the same (within a factor of e^ε) whether an individual’s data is included in the dataset or not. This ensures that an observer of the output cannot confidently determine whether any specific individual’s data was used in the computation, thus providing privacy protection.