New method protects whistleblowers from retaliation by ensuring their reports remain private.
problem Whistleblowers face retaliation, and current protections are insufficient.
method Formalizes protection against strong-adversary threat model as per-report -differential privacy, and provides a generic mechanism to reduce private auditing to private continual counting.
result Demonstrates a reduction in selection error and improved utility over randomized response.