Utility–privacy plots for the adaptive threshold attack model for AAF releases, compared with baselines. (A) K = 10, α = 0.75. (B) K = 10, α = 0.9.