Utility–privacy plots for the fixed threshold attack model for AAF releases, compared with baselines. (A) θ = 0, α = 0.5. (B) θ = 0, α = 0.9.