Releasing seemingly innocuous functions of a data set can easily compromise the privacy of individuals, whether the functions are simple counts [35]orcomplexmachine learning models like deep neural networks [52,30].

Learning relies on coordinated synaptic changes in recurrently connected populations of neurons.