Abstract With increasing awareness of the privacy risks posed by mobile phone location data, researchers need ways to use mobility data while offering stronger privacy guarantees to the individuals included in this data. A promising approach to this challenge is the creation of privacy-preserving mobility insights from decentralized location data using Local Differential Privacy (LDP). However, mobility data generated with LDP, based on the introduction of noise by individual mobile devices, is limited by the volume of noise required to achieve individual privacy. In this paper, we provide a fully reproducible model of the accuracy of mobility networks generated with LDP compared to mobility network data generated with more traditional privacy mechanisms: Central Differential Privacy (CDP) and K-anonymity. Using a simulated mobile phone mobility dataset informed by real-world travel patterns in the USA, we explore the trade-off between privacy and data utility provided by different parameters in a federated system with LDP. We also explore the impact of spatial and temporal aggregation on data accuracy, showing that long-standing considerations regarding the appropriate units of analysis for geographic data play a key role in determining the utility of federated mobility data with LDP. Our paper facilitates an in-depth understanding of the trade-offs between privacy and data utility entailed by the future adoption of a federated approach which uses LDP to generate insights from decentralized mobility data.
Gibbs et al. (Fri,) studied this question.