Table 5. Comparison with state-of-the-art DP-SGD.

	DP-BCD	DP-SGD
DP privacy cost	$\epsilon =1.0,\delta ={10}^{-4}$	$\epsilon =1.0,\delta ={10}^{-5}$
Model utility (prediction accuracy %)	94.6	75.7
Attack accuracy (F1-score %)	50.0	58.1