The total variation distance is proposed as a privacy measure in an information disclosure scenario when the goal is to reveal some information about available data in return of utility, while retaining the privacy of certain sensitive latent variables from the legitimate receiver. The total variation distance is introduced as a measure of privacy leakage by showing that: 1) it satisfies the post-processing and linkage inequalities, which makes it consistent with an intuitive notion of a privacy measure; 2) the optimal utility-privacy trade-off can be solved through a standard linear program when total variation distance is employed as the privacy measure; and 3) it provides a bound on the privacy leakage measured by mutual information, maximal leakage, or the improvement in an inference attack with a bounded cost function.

中文翻译：

---

以总变化距离作为隐私权的最佳效用-隐私权衡

当目标是揭示一些有关可用数据的信息以换取效用时，同时保留来自合法接收者的某些敏感潜在变量的隐私权时，建议将总变化距离作为信息披露方案中的隐私权度量。通过显示以下事实来引入总变化距离，以度量隐私泄漏：1）满足后处理和链接不等式，这使其与隐私度量的直观概念保持一致；2）当将总变化距离用作隐私度量时，可以通过标准的线性程序来解决最佳效用-隐私权衡问题；3）它通过相互信息，最大泄漏或使用有代价函数的推理攻击的改进来度量隐私泄漏的边界。