Embed Notice

This can technically be made to work in cases where privacy/anonymity from the collating party isn't strictly required e.g. a government department providing differentially private census information to the public at large.

Government statistics bodies don't (and cannot) claim that your filled out census forms are private from them (or from the future) - but they can claim that they won't immediately reveal your information to the highest bidder.