Skip to content
AI.info

Research

Differential Perspectives: Epistemic Disconnects Surrounding the US Census Bureau's Use of Differential Privacy

Overview Research area: Science and Technology Studies (STS), data ethics, and the governance of official statistics — situated in AI Safety & Ethics, with differential privacy as the focal technology

arXiv
2602.18648
Published
2026-02-20
Authors
Danah Boyd, Jayshree Sarathy

AI summary

Overview

Research area: Science and Technology Studies (STS), data ethics, and the governance of official statistics — situated in AI Safety & Ethics, with differential privacy as the focal technology.

Technical level: Beginner-Friendly with respect to mathematics. The abstract presents this as an essay and ethnographic analysis, not a technical or quantitative evaluation of differential privacy; the concepts in play are social and epistemic rather than algorithmic.

Scope (one sentence): The paper analyzes the ongoing controversy over the U.S. Census Bureau's adoption of differential privacy for the 2020 Census as a conflict over uncertainty, trust, and the legitimacy of the Census, arguing that repair requires rebuilding a "statistical imaginary."

What This Paper Is About

When the U.S. Census Bureau moved to modernize its disclosure avoidance procedures for the 2020 Census by adopting differential privacy, it triggered a controversy that the authors describe as still ongoing. The change left stakeholders facing technical and procedural uncertainties that made it hard for them to judge the quality of census data, and it also exposed the statistical illusions and limits underlying census data itself — weakening trust not only in the data but in the Bureau. The paper's goal is to examine the epistemic dimensions of this dispute and to argue about what genuine trust repair would require.

Key Contributions

  1. An epistemic framing of the differential privacy controversy. Rather than treating the dispute as a narrow technical disagreement, the essay analyzes it as a battle over uncertainty, trust, and institutional legitimacy.
  2. An account of how uncertainty blocks evaluation. The paper identifies the technical and procedural uncertainties introduced by the shift to differential privacy as the reason stakeholders were unable to assess data quality.
  3. A claim about what the controversy revealed. The transformation is argued to have exposed the statistical illusions and inherent limitations of census data, with trust damage extending from the data to the Census Bureau as an institution.
  4. The concept of a "statistical imaginary." The authors argue that rebuilding trust demands more than technical repairs or better communication — it requires reconstructing this imaginary, which they identify as the deeper object of the conflict.

Main Findings

  • Uncertainty undermined stakeholders' ability to judge data quality: The technical and procedural changes introduced by differential privacy left stakeholders without a basis for evaluating whether the data were good enough.
  • Trust damage exceeded the data itself: The controversy weakened confidence not only in census data but in the Census Bureau as an institution.
  • The shift exposed hidden assumptions: The move surfaced "statistical illusions" and limitations of census data that had previously gone unexamined by many stakeholders.
  • The controversy is fundamentally epistemic, not just technical: The authors characterize it as a contest over uncertainty, trust, and legitimacy rather than a solvable engineering problem.
  • Technical fixes and improved communication are insufficient: Rebuilding trust, on this account, requires reconstructing a statistical imaginary — a shared set of expectations and understandings about what statistics are and what they can be trusted to do.
  • No quantitative results are reported in the abstract: The abstract contains no measurements, error metrics, survey counts, or evaluations of differential privacy's accuracy; it is a conceptual and ethnographic argument.

Methodology in Plain English

The authors approach the controversy as an interpretive social-science problem. They draw on theories from Science and Technology Studies — a field that studies how scientific and technical knowledge is produced, contested, and made authoritative — and on ethnographic fieldwork, meaning sustained observation and engagement with the people and communities involved in the dispute. Using that lens, they trace what different stakeholders understood, expected, and could not know as the Census Bureau changed its methods, and they interpret the resulting conflict as a clash over uncertainty, trust, and institutional legitimacy. The abstract does not specify the fieldwork sites, participants, or duration, so those details are not available here.

Why This Matters

Impact on research: The paper connects debates about privacy-preserving computation to longstanding questions in STS about how numbers acquire authority and how that authority can be lost. It suggests that evaluations of disclosure-avoidance methods need to account for how stakeholders interpret and trust data, not only for formal privacy guarantees or accuracy.

Real-world applications (as implications of the argument):

  • Official statistics production: Agencies adopting or considering differential privacy or similar methods must contend with how such changes are perceived and whether users can still assess data fitness.
  • Downstream data users: Researchers, planners, and advocates who rely on census-derived data face the practical problem of judging usability when the production process itself is contested.
  • Public participation and legitimacy: If trust in the Bureau erodes, the argument implies consequences for public cooperation with and acceptance of census results.
  • Governance and communication of technical change: The paper implies that announcements of methodological modernization need to be paired with efforts to rebuild shared understanding, not just explanations.

Industry relevance: Relevant to statistical agencies and government data offices, privacy-engineering teams deploying formal privacy mechanisms, data journalism and civic technology organizations that interpret official data, and any organization whose legitimacy depends on the credibility of the numbers it publishes. The abstract does not describe commercial or product-specific impacts.

Future Directions

  • Defining and operationalizing the "statistical imaginary": What exactly must be reconstructed, by whom, and how would anyone know it had been rebuilt?
  • Designing alternatives to technical repair: If improved communication and technical fixes are insufficient, what institutional, procedural, or participatory changes could meaningfully restore trust?
  • Understanding how uncertainty is experienced and communicated: How can agencies convey the meaning and limits of their methods so that stakeholders can evaluate data quality rather than being unable to judge it at all?
  • Extending the analysis to other contexts: The abstract frames the controversy as ongoing, leaving open how widely the epistemic disconnect between data producers and data users generalizes beyond this case.

Target Audience

Most useful to scholars and practitioners working at the intersection of data ethics, Science and Technology Studies, and official statistics: STS and information-society researchers, data ethicists and AI-ethics readers, statisticians and disclosure-avoidance specialists interested in the social reception of their methods, census data users and advocates, and policy or communications staff at statistical agencies. No prior mathematical training in differential privacy is required by the abstract, though familiarity with debates about government data and privacy helps.

Authors’ abstract

When the U.S. Census Bureau announced its intention to modernize its disclosure avoidance procedures for the 2020 Census, it sparked a controversy that is still underway. The move to differential privacy introduced technical and procedural uncertainties, leaving stakeholders unable to evaluate the quality of the data. More importantly, this transformation exposed the statistical illusions and limitations of census data, weakening stakeholders' trust in the data and in the Census Bureau itself. This essay examines the epistemic currents of this controversy. Drawing on theories from Science and Technology Studies (STS) and ethnographic fieldwork, we analyze the current controversy over differential privacy as a battle over uncertainty, trust, and legitimacy of the Census. We argue that rebuilding trust will require more than technical repairs or improved communication; it will require reconstructing what we identify as a 'statistical imaginary.'

Read the original paper