We present d3p, a software package designed to help fielding runtime efficient widely-applicable Bayesian inference under differential privacy guarantees. d3p achieves general applicability to a wide range of probabilistic modelling problems by implementing the differentially private variational inference algorithm, allowing users to fit any parametric probabilistic model with a differentiable density function. d3p adopts the probabilistic programming paradigm as a powerful way for the user to flexibly define such models. We demonstrate the use of our software on a hierarchical logistic regression example, showing the expressiveness of the modelling approach as well as the ease of running the parameter inference. We also perform an empirical evaluation of the runtime of the private inference on a complex model and find an ~10 fold speed-up compared to an implementation using TensorFlow Privacy.
Original languageEnglish
Pages (from-to)407–425
JournalProceedings of Privacy Enhancing Technologies
Issue number2
Publication statusPublished - 1 Apr 2022
MoE publication typeA4 Article in a conference publication
EventPrivacy Enhancing Technologies Symposium - Sydney, Australia
Duration: 11 Jul 202215 Jul 2022
Conference number: 22


  • Differential privacy
  • JAX
  • NumPyro
  • Probabilistic programming
  • Variational inference


Dive into the research topics of 'd3p - A Python Package for Differentially-Private Probabilistic Programming'. Together they form a unique fingerprint.

Cite this