We study the design of mechanisms satisfying a novel desideratum: privacy. This requires the mechanism not reveal "much" about any agent's type to other agents. We propose the notion of joint differential privacy: a variant of differential privacy used in the privacy literature. We show by...