Abstract: Techniques for generating and implementing data privacy policies are described. In an example, metadata associated with a data source is annotated with attributes indicative of the data contained therein and its associated sensitivity. Based on the annotated metadata and the contexts in which the data will be accessed, including the purpose for accessing the data, the role of the accessor, and the location of the accessor, privacy policies are generated from a privacy model. The privacy policies are generated with a collection of methods for protecting the data in the data source upon access. Based on a privacy policy and a target computing environment, an executable instance of the privacy policy is generated and deployed in the target computing environment to protect the data.

Abstract: Technologies are provided for efficiently querying a database using a plurality of oblivious random-access memories (ORAMs) while providing differential privacy. Subsets of a set of database records can be stored in a plurality of ORAMs. The subsets of database records in the separate ORAMs can be concurrently accessed (for example, by a database query server). When a database query is received, a number of database records that match the query can be identified for each of the ORAMs. A differential privacy constraint can be used to determine an additional number of database records to be retrieved from each ORAM. The differential privacy constraint can specify an upper bound on the number of records to be retrieved from each ORAM to prevent (or reduce the risk of) information leakage. Once all of the identified records are retrieved from the plurality of ORAMs, the additional records can be discarded.