Stackelberg Game for DP Data Pricing

• The paper develops a Stackelberg game framework that models the sequential interaction between a market-maker and a data buyer, balancing differential privacy and data utility.
• It introduces a balanced pricing mechanism that ensures incentive compatibility and arbitrage-freeness by linking noise variance selection to privacy compensation.
• The framework’s nonlinear power pricing extension demonstrates how adjusting price elasticity can tune the market outcome and influence precision in data responses.

A Stackelberg game framework for pricing differentially private (DP) data formalizes the sequential interaction between a market-maker, who sets a pricing rule, and a data buyer, who selects the noise variance of her query response subject to differential privacy constraints. This framework accommodates the privacy-utility trade-off inherent in DP mechanisms, allowing incentive-compatible, privacy-conscious, and arbitrage-free pricing for statistical queries in modern data markets (Bo et al., 20 Dec 2025).

1. Model Structure and Key Actors

The Stackelberg game is comprised of two players:

• Leader (Market-Maker): Commits to a pricing mechanism parameterized by $k > 0$.
• Follower (Data Buyer): Observes the posted price schedule and chooses the noise variance $\sigma^2 \ge \sigma^2_{\min}$ to maximize her net utility.

Let $q \in \mathbb{R}^n$ denote the linear query, $f(q) \ge 0$ a semi-norm (often $\|q\|_2$), and $A(q) > 0$ the buyer's value-intensity. The buyer's valuation for a noisy answer with standard deviation $\sigma$ is $V(q, \sigma) = A(q)/\sigma$.

To enforce $\epsilon$-differential privacy, Laplace noise $\xi \sim \mathrm{Lap}(0, b)$ with $b = \sigma/\sqrt{2}$ is added, ensuring

$$\epsilon = \frac{\Delta q}{b} = \frac{\sqrt{2}\,\Delta q}{\sigma} \qquad \implies \qquad \sigma^2 = \frac{2(\Delta q)^2}{\epsilon^2}$$

where $\Delta q$ is the query's $\ell_1$-sensitivity.

Each data owner $i$ experiences privacy loss $\epsilon_i \le \gamma |q_i|/\sigma$, and is compensated $\mu_i(q,\sigma) = \gamma c_i|q_i|/\sigma$. The aggregate privacy-cost threshold is

$$\Gamma(q) := \sqrt{2}\,\gamma \sum_{i=1}^n c_i|q_i|$$

2. Balanced Pricing Mechanism and Utility

The market-maker posts a balanced (arbitrage-free) pricing function:

$$\pi(q, \sigma; k) = \max \left\{ \frac{k f(q)^2}{\sigma}, ~ \frac{\Gamma(q)}{\sigma} \right\}$$

ensuring payments always cover privacy costs. The data buyer's net utility is

$$U(\sigma; k) = V(q, \sigma) - \pi(q, \sigma; k) = \frac{A(q)}{\sigma} - \max \left\{ \frac{k f(q)^2}{\sigma}, ~ \frac{\Gamma(q)}{\sigma} \right\}$$

while the market-maker's profit is

$$\Pi(k, \sigma) = \max \left\{ \frac{k f(q)^2}{\sigma}, ~ \frac{\Gamma(q)}{\sigma} \right\} - \frac{\Gamma(q)}{\sigma} = \left( \frac{k f(q)^2}{\sigma} - \frac{\Gamma(q)}{\sigma} \right)^+$$

where $(x)^+ = \max\{x, 0\}$.

3. Equilibrium Analysis and Market Regimes

The game is solved via backward induction:

• Follower’s Stage: For a fixed $k$, the buyer maximizes $U(\sigma; k)$ over $\sigma \ge \sigma_{\min}$. The switch point between pricing branches is

$\sigma_{th}(k) = \frac{f(q)^2}{\Gamma(q)} k$

yielding a piecewise utility:

$$U(\sigma; k) = \begin{cases} \frac{A(q) - k f(q)^2}{\sigma} & \text{if } \sigma \le \sigma_{th}(k) \ \frac{A(q) - \Gamma(q)}{\sigma} & \text{if } \sigma \ge \sigma_{th}(k) \end{cases}$$

• Leader’s Stage: Anticipating the buyer's best response $\sigma^*(k)$, the market-maker chooses $k$ to maximize profit:

$$\Pi(k) = \left( \frac{k f(q)^2}{\sigma^*(k)} - \frac{\Gamma(q)}{\sigma^*(k)} \right)^+$$

Three regimes emerge based on $A(q)$ versus $\Gamma(q)$ (for $\sigma^*(k)$ subject to $\sigma_{\min}$):

Regime	Condition	Buyer Optimal $\sigma^*$	Market-Maker Profit
Profitable	$A(q) \ge 2\Gamma(q)$	$\sigma^* = \sigma_{min}$, $k^* = \frac{A(q) \sigma_{min}}{2 f(q)^2}$	$\Pi = \frac{A(q) - 2\Gamma(q)}{2\sigma_{min}}$
Break-even	$\Gamma(q) < A(q) < 2\Gamma(q)$	$\sigma^* = \sigma_{th}(k)$	$\Pi = 0$
No-trade	$A(q) \le \Gamma(q)$	$\sigma^* \to \infty$ (buyer declines)	$\Pi = 0$

Buyer participation requires $A(q) > \Gamma(q)$. Profitable trade requires $A(q) \ge 2\Gamma(q)$. In the break-even region, trade occurs with zero market-maker profit.

4. Differential Privacy Constraints and Micro-Payments

The pricing strategy is tightly linked to DP guarantees. For a target $\epsilon$, the minimum achievable noise variance for query $q$ is $\sigma^2 = 2(\Delta q)^2 / \epsilon^2$. Each data owner is compensated to reflect individual privacy loss, with aggregate micro-payments always covered by the balanced pricing function:

$\sum_i \mu_i(q, \sigma) = \frac{\Gamma(q)}{\sigma}$

This design ensures incentive compatibility for both market participants and data owners, aligning economic incentives with privacy constraints.

5. Nonlinear Power Pricing Extension

The framework generalizes to nonlinear pricing functions:

$$\pi(q, \sigma; k) = \max \left\{ \left( \frac{k f(q)^2}{\sigma} \right)^p, ~ \frac{\Gamma(q)}{\sigma} \right\}$$

for $p \in (1/2, 1]$. The branch-switch (generalized threshold variance) is now

$$\sigma_{th}(k) = \left( \frac{k^p f(q)^{2p}}{\Gamma(q)} \right)^{2/(2p-1)}$$

In the profitable regime for $A(q) \ge 2\Gamma(q)$, the equilibrium is

$$\sigma^* = \sigma_{min}, \qquad k^* = \left( \frac{A(q)}{2p f(q)^{2p}} \right)^{1/p} \sigma_{min}^{(2p-1)/(2p)}$$

This extension allows the market-maker to alter price elasticity with respect to accuracy, further tuning profit and query precision outcomes.

6. Significance, Interpretations, and Market Implications

The Stackelberg game framework for DP data pricing encapsulates several critical properties:

• Sequential Price Setting: The leader adjusts per-unit accuracy pricing to influence the trade-off faced by the follower between data utility (accuracy) and privacy.
• Privacy-Utility Encoding: The follower’s choice of noise variance $\sigma$ directly maps to the classical privacy-utility trade-off, with higher $\sigma$ implying better privacy (lower $\epsilon$) at lower data value.
• Incentive Compatibility and Arbitrage-Freeness: The balanced price function enforces that total payment to data owners is never undercut, establishing arbitrage-freeness.
• Sharp Regime Division: The model divides the market into strictly profitable, break-even, and non-participation regimes based on $A(q)$ and $\Gamma(q)$, simplifying strategic analysis and contract design.
• Mechanism Design Link: The approach bridges differential privacy with economic mechanism design, supporting unified, market-based yet privacy-conscious data exchange.

A plausible implication is that by adjusting the pricing function's structure (e.g., power pricing), data markets can flexibly regulate the sensitivity of pricing to buyer precision demands, tailoring market outcomes to policy or competitive considerations (Bo et al., 20 Dec 2025).