How Does Differential Privacy Work