In database security,a form of inference control that determines,inadvance,whether or not a set of statistics can be released without causing personal disclosure.