Limits of Private Learning with Access to Public Data

Raef Bassily, Shay Moran, Noga Alon

Neural Information Processing Systems 

We consider learning problems where the training set consists of two types of examples: private and public. The goal is to design a learning algorithm that satisfies differential privacy only with respect to the private examples. This setting interpolates between private learning (where all examples are private) and classical learning (where all examples are public). We study the limits of learning in this setting in terms of private and public sample complexities.