DIFFERENTIAL PRIVACY IN DISTRIBUTED SETTINGS