Privacy amplification by random allocation

TL;DR

We consider the privacy amplification properties of a sampling scheme in which a user's data is used in $k$ steps chosen randomly and uniformly from a sequence (or set) of $t$ steps…

Opening excerpt from the authors’ abstract. source