Poetic description of privacy-preserving analysis

Erlingsson et al give a poetic description of privacy-preserving analysis in their RAPPOR paper [1]. They say that the goal is to

" allow the forest of client data to be studied, without permitting the possibility of looking at individual trees.

• What is differential privacy?
• Data privacy consulting

[1] ilfar Erlingsson, Vasyl Pihur, and Alexsandra Korolova. RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response. Available here.