Privacy guarantee that limits the impact of any single record on aggregated outputs by adding calibrated noise.