US bans differential privacy in Census data (desfontain.es)

397 points by nl 4 hours ago

asolove 3 hours ago

The replies here arguing we should publish it all are wild in the worst kind of first-order thinking way.

It’s a census: it just asks questions.

If you start publishing and weaponizing the data against people with various attributes, they’ll just lie or not answer. And then you are left with worse than nothing: bad data people try to act on.

bagels 2 hours ago

The US Government is the entity that weaponizes the data. The most obvious example is the Census Bureau compiling lists of people of Japanese descent to imprison during WWII. That's just the most obvious one that I know of without looking up more.

The real push for this now is to form lists of people to disenfranchise.

conception 2 hours ago

Remember “leftist “ and transgender activists are terrorists now.

First they came for…

whattheheckheck 2 hours ago

bilbo0s 2 hours ago

newZWhoDis 2 hours ago

Does anyone actually believe this crap?

You think the census is what the government would use to mass identify and imprison people, not the NSA database(s)?

You think homeland security, or the FBI, or any other alphabet agency doesn't already have access to a giant list of people?

Think about what meta knows about everyone, or Google. You do realize that the US gov has read access to their core databases right?

"The census" has absolutely no bearing on any of that which you're worried about.

It's just shocking the level of ignorance that gets upvoted in the comments here now.

falsemyrmidon 2 hours ago

awesomeMilou 2 hours ago

esseph 20 minutes ago

kgwxd 27 minutes ago

willmadden an hour ago

FrustratedMonky 2 hours ago

smrtinsert 2 hours ago

throwawayffffas 13 minutes ago

The easy solution is to just reduce the resolution and scope of the data to the degree it is absolutely necessary. The census exists to inform representation decisions. All other concerns are addons. You can have all the data on the county or voting district level and strip data as you increase your resolution, to the point you only keep population number at the neighborhood, block level.

Knowing the racial, ethnic and socioeconomic background of the residents of a single building block is only useful to discriminate against them.

jmalicki 6 minutes ago

There are plenty of other uses - knowing where to build stores to serve your target market, predicting possible pandemic vulnerabilities, etc.

ShinyLeftPad 2 hours ago

You first gather the data while people don't know or care. Then you weaponize it later. It happened at least once not long ago in another country, seems not overreaction to be concerned about it

comex 44 minutes ago

It happened a year ago in this country, with IRS sharing data with ICE (breaking a longstanding policy of keeping taxpayer data private within the government).

kajman an hour ago

If this is a Nazi reference, Census data was used to send people to concentration camps here during the same era. Less awful than death camps, at least.

dathinab 8 minutes ago

Yes.

Extremists or in general any fraction willing to engage in systematic discrimination, harassment, terrorizing or similar love highly detailed non anonymized census data.

Why?

Because it gives them the perfect layout for which areas to harass (areas likely to yield), which to brutalize (areas unlikely to yield or from especially "hated" people), which to best not touch which (areas with too much influence/money or likely to contain hidden sympathizers), which to systematically take apart through other means like building a highway through them (e.g. "hated" communities to strong/connected to brutalize). etc. etc.

All of this has a lot of history weather it's from right extremists like fascists or left extremists(1).

At which point the question is, if the data you collect is that abuseable. Should you even collect it? Is it even really needed?

(1): Like actual left extremists, the a lot of US sources have the habit to label people as left extremists which by EU standards sometimes aren't even left (but centrist) and very far away from extremism...

tbrownaw 2 hours ago

Any use to identify where government resources are best used, will have people thinking they should have gotten more and would have if they'd answered differently. Ie, that their answers were "weaponized" against them.

glenstein 2 hours ago

I guess the way to optimize is to find an equilibrium between an extreme of specificity and an extreme of vagueness that's still actionable from a high-level policy perspective.

Something about this conversation is fundamentally broken if there's no space to iterate towards optimization and instead it's just swinging between maximalist extremes.

HumblyTossed an hour ago

This administration does ... not ... care ... about ... facts.

vkou 9 minutes ago

> they’ll just lie or not answer

The Harper government actively worked on destroying the efficacy of the Canadian census, to make it more difficult for subsequent governments to make data-driven decisions.

In addition to the obvious goal of making it easier to identify and target homosexuals, trans people, minorities, immigrants, it's quite possible that destroying future governments' ability to make good decisions is one of the objectives of the Republican party. Stop voting for the face-eating leopard party, already.

For all the very clever people pointing out that this is nothing new, I have two responses.

1. Your cell company may track your location, and your credit rating agencies know how many nose hairs you have, but they doesn't always (or even usually) have the deeply personal information you're supposed to put down in a census.

2. Enough of a change in degree is a change in kind. If you disagree, remember that Imperial Russia had the Okhrana and sent over a million Sybiraks - prisoners and exiles - to Siberia, and then the fucking CHEKA and the NKVD and then the (kinder, softer, slightly less outright murderous) KGB went ahead to send 18 million people into the GULAG system, and outright murdered half a million to a million. This was all the same, right? No difference?

webnrrd2k an hour ago

There's a pretty good chance the Elon Musk, plus Russia and China have had more-orless unrestricted access to American's data since the DOGE dismantling of US government. Plus, by intentionally removing security and accountability mechanisms it makes it impossible to accurately determine how bad the damage actually was.

cyanydeez 2 hours ago

have you not been paying attention for 10 years? At the top of the rotting snakehead they know all this, they arn't arguing in good faith.

mc32 2 hours ago

You can’t completely trust what people say anyway. There are stated preferences and observed preferences in economics but it applies to other areas of life.

tokai 2 hours ago

>It’s a census: it just asks questions.

Thats what dutch and french bureaucrats thought until 1940.

derektank 3 hours ago

The entity most capable of weaponizing demographic data is the government itself. If people weren’t previously providing false information to the census, I’m skeptical that this change is what will push people over the edge.

notfromhere 2 hours ago

Congress passed laws that blocked the federal government from fusing data across departments for this specific reason. the admin decided to ignore those, and a friendly congress is deciding to not act on that.

You really, really don't want a government who can build a unified profile on you in that way.

r14c 2 hours ago

kajman an hour ago

I "enumerated" for the last census. Trust in my community was already not high* and I had lots of interesting encounters. I really believed the rather invasive data I was collecting with a friendly face would be used and handled responsibly. I feel for the poor souls that'll sign up to go door to door for 2030 now that the firewalls against weaponizing and monetizing all of our sensitive government data has been torn down, and even more for those that will volunteer information that can hurt them.

The comments that this rather expensive endeavour should just be about getting a head count are also amusing to me. The data collected was such an important baseline of common understanding, and this will not be a good thing for its future quality. I've grown very jaded now seeing all the things taken for granted in this country and lost or degraded recently with a whimper.

*: To be fair, they sent me specifically to places that didn't respond, so I was naturally led to believe that everyone in my region hated the government, ignored bizzarrely threatening fliers, or had recently moved and had no knowledge of the inhabitants (if any) during the census period.

Kim_Bruning 2 hours ago

Coming from a certain european country, you never know what answer on the census might get you into trouble.

"What is your religious affiliation". Seems perfectly innocuous, but turned out to be retroactively fatal if your answer could be attributed to you by a certain foreign occupier in the 1940s .

closeparen 12 minutes ago

Europe’s next persecution is obviously going to be migrants. So surely any institution caught collecting, processing, or retaining information about citizenship, nationality, work authorization, etc. has been destroyed by the data privacy regulators, right?

Bratmon 2 hours ago

Surely any such foreign occupier would just demand the unredacted data?

throwawayffffas 11 minutes ago

Exactly why a government may refrain from collecting such data, as it is not even relevant in any kind of policy decision.

iso1631 16 minutes ago

That's where you hope people like Rene Carmille are around. S

gambiting 39 minutes ago

Yes, which is why the government shouldn't have this data at all in the first place.

monitorlizard 28 minutes ago

well_ackshually an hour ago

France used to make plenty of lists. We loved lists. Lists are good. Jews lists? Sure, it's maybe useful one day when we want to do something.

Boy were the Germans happy to find these.

The American obsession with asking for people their perceived origins (AAPI, AA, Latino, ...) is more than weird: it's downright dangerous. Don't fucking ask these questions, and never, ever write it down, especially not with names.

Thankfully, now they can just buy it from data brokers and let Palantir target, so that makes life easier for them

Rygian 2 hours ago

"What is your religious affiliation" makes absolutely no sense in a census exercise. IMO.

twoodfin 2 hours ago

The U.S. Census Bureau collects tons of data unrelated to the decennial counting for Congressional apportionment.

https://www.census.gov/programs-surveys.html

The American Community Survey is the most well-known, as it replaced the “long form” sampling that had been an extension to the Census.

yoyohello13 2 hours ago

Unless you’re a government explicitly and openly aligned with Christian nationalists.

talon8635 an hour ago

The point might be going over my head… why does it make no sense?

iririririr 17 minutes ago

mschuster91 an hour ago

It actually does. Religious affinity can absolutely be useful for longer trend studies, and census data is usually of much, much higher quality than other random sample studies.

WillPostForFood an hour ago

Asking about your religion on the census is against the law in the US:

no person shall be compelled to disclose information relative to his religious beliefs or to membership in a religious body.

https://www.congress.gov/94/statute/STATUTE-90/STATUTE-90-Pg...

petilon an hour ago

Religion is just an example. Don't dwell on it.

swsieber an hour ago

> compelled

Doesn't that mean they can ask that question with an option for "rather not disclose"?

arjie 2 hours ago

Pretty sad, in my opinion. In my ideal the state should have visibility into the shape of the people present so that we can make good decisions about our combined organization. I think we’re making a mistake we will come to regret by intentionally damaging our data collection infrastructure.

I think a large amount of the US’s success is the result of good institutions handling granular data. Policies can be adjusted to match outcomes more rapidly than otherwise.

I understand why people decide to diminish all state capacity - they feel that governments are populated by their opponents who will use state capacity against them. But as our relative strength wanes, our ability to overcome these forces of inertia does as well. And then our governments become less capable and eventually life starts getting worse.

We don’t need house-level data immediately (except perhaps in order to place census blocks within their appropriate congressional district etc). But there are aggregation units above which we should be using as good information as we possibly could be.

tempodox an hour ago

> I think we’re making a mistake we will come to regret by intentionally damaging our data collection infrastructure.

Intentionally damaging infrastructure is the recurring theme of this administration.

bee_rider an hour ago

I’d be more interested in giving my state detailed info, letting them run programs. The country can have aggregate data.

Bratmon 2 hours ago

But this article is about a decision to damage the census less. If you value an accurate census, you should be celebrating!

swiftcoder 2 hours ago

TFA lays out why things don't work that way. If you erode trust in the privacy of census responses, an awful lot of folks will have to start lying on their census

MinimalAction 2 hours ago

Whatever you do, there is a level of trust that is assumed when census takes place. The trust that this data is then not identified in a way that could be targeted for scams, frauds, and other such evils. But in NY, house sale records are made public but much to the detriment, many mortgage companies fake a bill for payment.

Differential privacy is absolutely necessary, and the social scientists being unable to reconstruct the data at an individual level is intended. A macroscopic description is rather enough for most purposes, and anything more is asking for a surveillance state.

mschuster91 an hour ago

> But in NY, house sale records are made public but much to the detriment, many mortgage companies fake a bill for payment.

That frankly sounds more like a failure of enforcement, on top of a failure of the construction of the financial system. Here in Germany, it is absolutely not a common thing that mortgages or the banks holding them get sold like a hot potato towards some other sucker, and thus such a letter would cause immediate suspicion.

jmole 3 hours ago

Ban it from the dataset, add it to the analysis. You can choose your own flavor of noise.

I don't know what the political undertones are here, but at some level you need to have actual ground truth, including "this person/household declined".

Publishing raw data though? That seems like shooting yourself in the foot from a national security perspective, not to mention all the other reasons not to do it.

glitchc 3 hours ago

> Ban it from the dataset, add it to the analysis. You can choose your own flavor of noise.

It is introduced in the public data, not the secret data.

tbrownaw 3 hours ago

> Differential privacy makes this trade-off explicit, and thus impossible to ignore. Maybe banning it is a way of pretending that the problem doesn't exist, in the hope that it will go away?

Or it's saying that one of these conflicting goals is more valuable than the other, and so shouldn't be sacrificed for it.

iugtmkbdfil834 2 hours ago

Can anyone explain to me the previous state and why it was desirable? I admittedly do not understand why people are getting riled up. I am not being difficult. I really don't understand the original state and the changed state here.

layer8 an hour ago

sherburt3 29 minutes ago

So "differential privacy" pretty much sounds like someone gets to modify the results of a census and how it gets modified is entirely up to their discretion.

Seems like something that could be abused to achieve political objectives.

foolfoolz 2 hours ago

i have such a hard time reconciling stuff like this:

> The census bureau decided to adopt differential privacy for the 2020 Census

and:

> The consequences will be dire for utility or for privacy, and possibly both. It's hard to understate this point: future statistical releases will either be useless compared to past ones, or they will be incredibly unsafe

so we took the census for centuries before this point, and it was “ok.” and for the last census only we added some privacy items. but if we remove just one of those filters, we are in “dire” circumstances? but there were no privacy features before. so we’re actually still much better off than we were for hundreds of years before this.

this makes it feel like an emotional overblown problem

vlovich123 2 hours ago

Believe it or not, mathematical techniques and computational power have increased in the past hundreds of years, not to mention the digitization of everything.

Privacy issues that weren’t possible before due to cost are now pennies to exploit. Also keep in mind as it points out people were using census data to drive gerrymandering efforts, so these attacks are real and have been going on for a long time.

cheesecakegood 6 minutes ago

Computers and improvements in data science/machine learning are basically the entire explanation. A LOT of the techniques that we use today to de-anonymize data require computation power not previously available. Even when doable, resources limited scale. Source: statistics degree

(Also, linkage. There are more data sources to cross reference now with the internet and social media and web tracking and hacks - the record footprint of Americans even as recently as the 70s and 80s was dramatically lower!)

antasvara an hour ago

> but there were no privacy features before. so we’re actually still much better off than we were for hundreds of years before this.

One notable thing we have today that we didn't have 100 years ago is a computer. Before, you could reasonably assume that recreating individual records wasn't feasible, at least not on a large scale. You can't assume that now. A 4 digit password was safe for hundreds of years, but it would be a security lability today for the same reason.

hristov an hour ago

As the article clearly states, privacy features have been in the census since 1990. It is just that the previously used privacy feature was not very strong and could be defeated. So it was replaced by a stronger feature in 1920. Before 1990 the census. 1990 was when personal computers were being popularized and the computing power available to individuals exploded and so then it was possible to use computers to separate out individual information from the data the census publishes. So the issue came up then.

No it is not an overblown problem.

baq an hour ago

For decades we were encrypting our communications with rsa, surely nothing is wrong with it?

gkbrk an hour ago

There is nothing wrong with it, and RSA is still commonly used. In fact, RSA is better against quantum computers compared to ECC.

LPisGood 2 hours ago

The concerns here, like most concerns about privacy, are hyperbolic hypothetical hypochondria, until they’re not.

thih9 2 hours ago

I guess this could be implemented externally.

Eg via some app that instructs respondents to enter a specific answer in a pseudorandomly chosen question.

Of course security would be another question.

declan_roberts 23 minutes ago

Census data is extremely powerful. It's why some states lost house seats and why some gained house seats.

It must therefore be maximally transparent. Do you want president Trump or palantir to decide on the "noise infusion" algorithm?

ProllyInfamous 2 hours ago

The fines for non-compliance are low enough to remain silent.

Do. The American Census Survey (randomly-selected long-form questionairre) is dangerously overinvasive.

watersb 3 hours ago

The better to sell the data, all your privates are belong to us.

lokar 2 hours ago

Can anyone share how other countries handle this?

simonw 2 hours ago

A lot of countries are really bad at running their census. https://asteriskmag.com/issues/11/why-governments-cant-count

ghaff an hour ago

And a lot of countries have things like national IDs that, rightly or wrongly, given things like RealID and passports, that a lot of Americans just don't like on principle.

pelorat an hour ago

Sure, in Europe we don't because we already have databases of all citizens, also recording attributes like race, skin color, religious affiliation or political leaning in a database is highly illegal, both for the government and for private use.

throw-the-towel 28 minutes ago

Wait, are you saying Europe doesn't have censuses?

generj 2 minutes ago

ThePhysicist 2 hours ago

I think it should be noted that there was a lot of dissatisfaction from users of the census data as far as I know. So it's not been banned just for politicals sake or because they hate privacy... Some people I talked to in the privacy field even called the whole thing a total disaster and weren't shy to put blame on John Abowd who apparently pushed this through despite a lot of internal opposition and concerns. Not sure if that's true, but what is definitely true is that the way the data was released produced serious issues downstream as most researchers and statisticians that ingested the data weren't prepared for receiving noisy data values. Differential privacy was applied in a way such that many invariants that data users cared about weren't preserved, which was expected as it's not possible as you can't preserve all invariants and at the same time add meaningful noise to the data. The thing is, with such a differentially private data release you need to adapt all of the downstream analyses to take into account the exact mechanism the data was altered in. And since the census bureau used a very intricate mechanism that didn't just add Laplace noise to data values but instead relied on a multi-stage process that preserved some invariants but not others it was very difficult to even write routines to account for the changes being made to the data. They essentially asked of every data user to rewrite their whole analysis pipeline based on the exact disclosure mechanism that contained a large number of bespoke choices regarding which data invariants to preserve and basically produced a mix of noisy, synthesized data that was just really hard to reason about. I don't even know if there even would've been a way to do this better, but the fact is that not every small county or school district has top-tier statisticians at hand that can just read a whole monograph on differentially private synthesized census data and then hotpatch their existing analysis systems to work with that data.

I was a big fan of differential privacy but now I think it might be doing more harm than good, as I haven't seen a single case where it was applied successfully in a problem where it actually mattered, and it contributed strongly to discrediting and preventing a lot of work on other anonymization techniques as it was deemed the only way to preserve privacy by the research community, so showing up with enhancements to k-anonymity or any other noise mechanism not rooted in it was a sure way to get ridiculed and ignored. And it's just not a practical mechanism, even when it works for a single disclosure you always end up having to blow up the privacy budget to a ridiculous amount in order to keep disclosing statistics as otherwise you would for almost all real-world data run out of budget after a few publications.

So, for me it's a technique that works in the areas where it doesn't really matter (publishing highly aggregated statistics that pose almost zero privacy risk even without differential privacy) and doesn't work in other areas where it would actually matter (publishing fine-grained data about individuals or small groups). There are some niche use cases but in my view the privacy community has really overblown the importance of differential privacy by portraying it as the only way to reliably anonymize data.

BTW the German census bureau has an interesting approach to anonymization which they use for several decades already and so far I haven't heard of any cases of successful de-anonymization of the data, maybe the US bureau should have a look at that for their own needs.

hristov 41 minutes ago

Of course there will be dissatisfaction from users of the data. Anyone that wants to use census data will prefer less privacy in the data. And anytime privacy is enforced the data becomes less useful. It would be certainly very convenient for both advertisers and gerrymandering political consultants to have detailed data on every citizen.

As the article says anytime you want to enforce privacy, the data becomes somewhat less useful, there is just no way around that.

The point of rights is that we have them and that they should not be trampled upon when they become slightly inconvenient to someone in power.

ThePhysicist 9 minutes ago

Are you sure about that? You are saying that differentially private census data couldn't be used for gerrymeandering and advertisement while non differentially private data could? Hard to believe, I'm not an advertisement or gerrymeandering expert but I would assume people running ads or cutting up districts are mostly interested in aggregate statistics i.e. they won't care about single households? And I would assume they can rely on voter files, party databases etc... And to the contrary there are reports [1] that indicate differential privacy actually makes gerrymeandering analysis more difficult or impossible. So, not really an argument for differential privacy, discriminatory action can be equally well taken based on differentially private data as the government cares about groups not individuals and groups aren't protected by differential privacy. It seems people really fundamentally misunderstand what this technique can achieve and what it won't do.

1: https://pmc.ncbi.nlm.nih.gov/articles/PMC8494446/?utm_source...

swiftcoder 2 hours ago

> serious issues downstream as most researchers and statisticians that ingested the data weren't prepared for receiving noisy data values

They weren't prepared for data that was obviously noisy. The data has always been inherently inaccurate, and folks just chose to ignore that previously

ThePhysicist an hour ago

No, there are dozens of articles discussing the mechanism and explaining the impact it had in different areas e.g. [1,2,3]. And the release mechanism wasn't just "add noise", far from it, you may read the original paper [4] to see how intricate it was, anyone wanting to make real use the resulting data would have needed to understand that approach in detail to work with the resulting data. The report of the national academies [3] is probably the most comprehensive analysis of the mechanism and the complications it introduced, so writing "it has always been inherently inaccurate" is just wrong, this new mechanism was way worse than just introducing unbiased sampling noise.

1: https://www.aeaweb.org/articles?id=10.1257%2Fpandp.20191107&... 2: https://www.science.org/doi/10.1126/sciadv.abk3283?utm_sourc... 3: https://www.nationalacademies.org/read/27150/chapter/14

4: https://hdsr.mitpress.mit.edu/pub/7evz361i/release/2

mikelitoris an hour ago

But why?? Differential privacy works? It's not even "woke" or whatever these people perceive. It's just math man...

wnc3141 3 hours ago

Stalin's demographic researchers kept disappearing until they came up with the numbers he wanted.

delichon 3 hours ago

The dueling political demands of accuracy and privacy are simply incompatible at some level. After reading this, maybe Hanlon's Razor isn't the right standard. Besides malice and stupidity, there is impossibility. Some problems just aren't solvable under certain constraints. I don't envy the statisticians tasked with finding a politically palatable solution to a math problem.

Sol- 3 hours ago

But the strength of differential privacy is that you can now make this tradeoff explicit and quantify it. I always liked it because it offers a mathematical solution to a policy problem, but then of course it's up to us to decide what parameters and tradeoff to choose. Also, some data might just not get published at all if the privacy implications are too problematic, so differential privacy might buy you more signal!

thatfrenchguy 2 hours ago

Yeah, the main issue with differential privacy is that you need competent government officials making decisions who understand math beyond a high school level.

tbrownaw 3 hours ago

It offers a mathematical description of a policy tradeoff, and the policy makers are apparently setting one of the parameters to zero.

ghaff 3 hours ago

There's a ton of information in the US that is accessible to various degrees--especially through the the deep web much less background investigations. Unless you're a wealthy person who can set up various levels of trusts you can't really hide them.

You can of course disagree about what what should actually be part of a transparent public record. (Though I suspect a lot of people post-date what was generally available in a "phone book.")

SpicyLemonZest an hour ago

I really have to take the anti-noise side here. I get why it's a hard problem, and I get why the Census Bureau thought this was a neat solution. But I'm imagining an accountant stepping through a similar chain of logic:

* I want to accurately report the finances of our company to the best of my ability.

* But that report would allow people to reconstruct private data about the terms of our contracts with various counterparties. I'd really like to avoid that, there's no rule that says we're supposed to release that data. In fact some of those contracts probably came with nondisclosure agreements!

* So here's what I'm going to do. I'm going to calculate our results to the best of my ability, and then I'm going to add random values to them and report only the randomized ones. Any reconstruction people try to do will be wrong because of the randomness.

* If the SEC says "no, you need to report your actual numbers", I will explain to them that there's no such thing as an actual number because all data is noisy.

I can't get behind it.

ck2 2 hours ago

if you want to keep your sanity, I suggest silently adding the phrase

     "...for the next 950 days" 
every time you read some politically spiteful news like this

because the next two years are going to become insanely miserable

layer8 an hour ago

It’s highly uncertain what will happen in 950 days.

zkzk_gamal 2 hours ago

i think they will use ai as a leverage card to other country to order them

yegortk 2 hours ago

Data shall set you free... or not

xenophonf 3 hours ago

This is a gift to reactionary gerrymandering and voting restriction efforts, along with things like yesterday's FBI raid of an Ohio voting rights organization.

https://www.statenews.org/government-politics/2026-06-12/ohi...

Representative Joyce Beatty is from Ohio and was instrumental in stopping Trump from illegally renaming the Kennedy Center.

https://www.theatlantic.com/culture/2026/06/kennedy-center-b...

thepryz 3 hours ago

Representative Beatty serves her own interests and her involvement Kennedy Center naming was just more of the same performative politics she routinely engages in. She's on the verge of being an octogenarian and missed a number of key votes, like the bill that cut funding to NPR, PBS, and other govt. programs. Kudos to her for working to remove Trump's name from the Kennedy Center but she needs to go.

smrtinsert 2 hours ago

The removal of his name is not performative since we're in the thick of a cult of personality president (at a bare minimum).

Pragmata 3 hours ago

Frankly i see no reason to keep this data private. They should simply publish a full dataset of the census, with no such data coarsening/differential privacy/ etc...

Fundamentally this is public data. If it's to dangerous to make public, it's too dangerous to collect, and people should be aware of exactly what it is.

There are very few things that the state has data on that should not be made public. Census data is simply not one of those things.

publishing should be the default for any data, and to keep it unpublished should require substantially good reasons that impact the country as a whole. Frankly, if it isn't detailed national defence plans, i struggle to see any data that should not be public.

simonw 3 hours ago

How hard have you thought about this?

The biggest challenge with running a census is getting people to trust you enough to answer your questions.

A lot of census questions are sensitive. The ACS covers topics like citizenship status, disabilities, income, SNAP assistance, languages spoken at home.

If you want accurate information about the people who live in your country you need the census process to feel as safe for people to respond to as possible.

Are you saying the census shouldn't collect any data that people wouldn't be comfortable publishing? Because that's a recipe for a census that is far less useful for helping the country make useful decisions.

wpollock 2 hours ago

> Are you saying the census shouldn't collect any data that people wouldn't be comfortable publishing? Because that's a recipe for a census that is far less useful for helping the country make useful decisions.

I'll say that. The state representatives should provide congress and the president any data needed to inform policy decisions about the people they represent. And as others have pointed out, other departments and agencies (such as the IRS) have most of the rest of the data required to make policy decisions.

Except for gerrymandering purposes, I fail to see why income, party affiliations, etc., is useful for the purpose the census was created for.

simonw an hour ago

nojito 2 hours ago

jonhohle 3 hours ago

This seems’s like an issue created by congress. the constitution only requires a headcount by state. Maybe they should use another mechanism to collect demographic data. Since the concern is not about representation, but allocation, tax returns seem like an obvious alternative and they are already private and collected at a much more granular level.

simonw 2 hours ago

SoftTalker 3 hours ago

The census isn't for helping the country make any decisions other than determining the number of representatives and apportionment of taxes. It should not be collecting any data that isn't necessary for that.

simonw 2 hours ago

pstuart 2 hours ago

Telemakhos 3 hours ago

I'd like to know when they stopped publishing census data. I have used it for genealogical purposes to track ancestors: you can see exactly who was living in which house, how they are related, and what their ages are (I found that women in my family often reported, both on the census and marriage documents, being younger than they actually were). I don't think I've seen data from after 1950, though.

I don't understand why the census would include SNAP data or income: surely the government already has that information. I have never doubted that the IRS knows my income better than I do. Maybe better use of existing datasets could restrict the census to less invasive questions.

Polizeiposaune 3 hours ago

philipkglass 3 hours ago

personofinteres 2 hours ago

mobeets 3 hours ago

Thank you for writing a much more thoughtful reply to this comment than I was drafting

bpt3 3 hours ago

Replying to the ACS with accurate information is required by law, so they don't actually need to rely on people feeling safe to get answers.

I don't trust the Census Bureau with my data, so if this is as "dangerous" as the author and some people here seem to think, they shouldn't be collecting it in the first place.

tbrownaw 3 hours ago

CAP_NET_ADMIN 3 hours ago

1. People give the information to the government under the expectation that this data is to be kept private or used in such a way that individual targeting is made impossible, you break that expectation and people will lie or won't give you this data.

2. Without noise injection it's rather simple to do statistical attacks to reverse engineer individual entities.

3. This data is and has already been used in the past to undermine democratic systems by targeting and disenfranchising minorities, as well as gerrymandering the US to hell.

4. "Too dangerous to make public, too dangerous to collect" - this is a false dichotomy. To govern effectively you need sensitive data, but it should be collected and used in a way that's safe for the individuals.

5. Macro level aggregates don't need individual exposure, that's why noise, anonymization and statistical functions are fine.

lokar 2 hours ago

Re point 1, not just an expectation, and explicit legal requirement.

toast0 3 hours ago

> They should simply publish a full dataset of the census, with no such data coarsening/differential privacy/ etc...

They do. After a substantial delay. Pretty handy for geneological research, while protecting privacy for the living.

halJordan 3 hours ago

That's a good default position, and I think should be our starting point.

But the devil is in the details. If we don't want advertisers constructing semi-complete profiles from simple web interactions then why would we publish 330 million census questionnaires for their use?

fwipsy an hour ago

So do you believe that individual income should be public? Or do you believe that the government should not take income into account for taxation or distribution of benefits?

righthand 3 hours ago

Then dox yourself right now with your previous census answers and PII. There are several obvious reasons to keep the data private, all you have to do is use your brain.

anonymars 2 hours ago

I've never met a "privacy is irrelevant" advocate that doesn't close the door when they go to the toilet

UqWBcuFx6NV4r 3 hours ago

Don’t quit your day job. One guess as to what gender, sexual orientation, and skin colour you have.

SoftTalker 3 hours ago

But why is the census asking about those attrbutes at all. The Constitution requires a count. That's it. A number. We don't need to know the rest of it, or if we do, it should be surveyed separately with voluntary participation.

glitchc 2 hours ago

righthand 3 hours ago

whatever1 3 hours ago

We can make them more accurate by leveraging ICE going door to door.