Negative Surveys
  In this paper we propose a strategy for administering a survey that is mindful of sensitive data and individual privacy. The survey in question seeks to estimate the population proportions of a sensitive, polychotomous variable and does not depend on anonymity, cryptography, or in legal guarantees for its privacy preserving properties.   Our technique, called Negative Surveys, presents interviewees with a question and t possible answers, and asks participants to eliminate one of t-1 alternatives at random. The method is closely related to randomized response techniques (RRTs) in that both rely on a random component to preserve privacy; however, while RRTs require respondents to choose among questions and give an answer, negative surveys ask them to choose between possible answers to a single question. This distinction has important consequences for the privacy, methodology, and reliability of our scheme.   In the course of the paper we quantify the amount of information surrendered by an interviewee, elaborate on how to estimate the desired population proportions, and discuss the properties of our method at length. We also introduce a specific setup that requires a single coin as a randomizing device, and that limits the amount of information each respondent is exposed to by presenting to them only a subset of the question's alternatives. 
Fernando Esponda