Prior-itizing Privacy: A Bayesian Approach to Setting the Privacy Budget in Differential Privacy Jerome P. Reiter Department of Statistical Science Department of Statistical Science Duke University