Mathematics · MapleScholar Plus

The Secret Coin Flip: How a 1965 Math Trick Invented Modern Data Privacy

People routinely lie when asked sensitive questions about tax cheating, drug use, or criminal behavior; Stanley Warner invented a private coin-flipping technique that gives every survey respondent total legal plausible deniability while allowing pollsters to measure the exact truth. Published in 1965, Warner’s "Randomized Response" became the foundational mathematical ancestor of modern Differential Privacy—the core algorithm protecting data privacy in Apple iPhones, Google search, and the US Census.

Author
Stanley L. Warner
Published
1965
Journal
Journal of the American Statistical Association
Last updated
September 2026
The Secret Coin Flip: How a 1965 Math Trick Invented Modern Data Privacy

In polling and social science, getting honest answers about sensitive topics—like tax fraud, illegal drug use, or marital infidelity—was historically impossible: respondents either refuse to answer or lie to protect their privacy and avoid legal trouble.

Statistician Stanley Warner designed an ingenious privacy shield. Before answering "Yes" or "No", the respondent secretly flips a coin that the surveyor cannot see: if it lands Heads, they tell the absolute truth; if it lands Tails, they simply answer "Yes." Because no one knows whether a "Yes" was forced by the coin or represents the truth, the respondent has total plausible deniability, while simple probability math allows the researcher to subtract the coin flips and calculate the true population percentage.

Warner’s method unlocked honest social polling and founded modern cybersecurity. By protecting survey respondents from legal exposure, by inspiring differential privacy in tech giants like Apple and Google, and by securing the US Census, randomized response protects digital privacy.

Reference

Warner, S. L. (1965). Randomized Response: A Survey Technique for Eliminating Evasive Answer Bias. Journal of the American Statistical Association, 60(309), 63–69.

Title

Randomized Response: A Survey Technique for Eliminating Evasive Answer Bias

Abstract

For various reasons individuals in a sample survey may prefer not to confide to the interviewer the correct answers to certain questions. In such cases the individuals may elect not to reply at all or to reply with incorrect answers. The resulting evasive answer bias is ordinarily difficult to assess. In this paper it is argued that such bias is potentially removable through allowing the interviewee to maintain privacy through the device of randomizing his response. A randomized response method for estimating a population proportion is presented as an example. Unbiased maximum likelihood estimates are obtained and their mean square errors are compared with the mean square errors of conventional estimates under various assumptions about the underlying population.

Cited 3,017 times · View on doi.org

Continue

Continue Exploring

Ask this paper your own questions, or keep browsing the verified research catalogue.