Alfred Rossi

Distinguished Scientist and Engineer at Immuta

Research interests: Mathematical privacy and privacy risk assessment; formal models of data protection law; automated reasoning and knowledge representation.

LinkedIn

Education

2017

Doctor of Philosophy, Computer Science and Engineering

The Ohio State University, Columbus, Ohio

Thesis: Temporal Clustering of Finite Metric Spaces and Spectral k-Clustering.

2017

Master of Science, Computer Science and Engineering

The Ohio State University, Columbus, Ohio

2010

Master of Science, Physics

The Ohio State University, Columbus, Ohio

2007

Bachelor of Science, Physics and Mathematics

The Ohio State University, Columbus, Ohio

Academic Employment

2025

Visiting Fellow

Dept. of Computer Science & Engineering, The Ohio State University

2018-2025

Senior Lecturer

Dept. of Computer Science & Engineering, The Ohio State University

2017-2018

Postdoctoral Researcher

Dept. of Computer Science & Engineering, The Ohio State University

2013-2017

Research Assistant

Dept. of Computer Science & Engineering, The Ohio State University

Publications

2026

Anonymisation in motion: from data protection to digital markets law.

with Sophie Stalla-BourdillonPrivacy and Data Protection, Volume 26, Issue 7, pp. 16-23.

2025

Parajudica: An RDF-Based Reasoner and Metamodel for Multi-Framework Context-Dependent Data Compliance Assessments.

with Luc Moreau and Sophie Stalla-BourdillonPreprint, arXiv:2512.05453.

2025

A critical assessment of EDPB Opinion 28/2024: Towards a principle-based approach to innovation?

with Sophie Stalla-BourdillonPrivacy and Data Protection, Volume 25, Issue 6, pp. 12-16.

2023

Pseudonymous Data.

with Sophie Stalla-BourdillonOxford Encyclopedia of EU Law.

2022

What are Trusted Third Parties? (Part 2)

with Hamsa Hassan and Sophie Stalla-BourdillonPrivacy and Data Protection, Volume 22, Issue 1.

2021

What are Trusted Third Parties? (Part 1)

with Hamsa Hassan and Sophie Stalla-BourdillonPrivacy and Data Protection, Volume 21, Issue 8.

2021

The technical fix for international data transfers - a word of caution.

with Sophie Stalla-BourdillonPrivacy and Data Protection, Volume 21, Issue 4.

2021

Aggregation, synthesization and anonymization: a call for a risk-based assessment of anonymization approaches.

with Sophie Stalla-BourdillonData Protection and Artificial Intelligence (CPDP 2020). Hart Publishing.

2019

Spectral Concentration and Greedy k-Clustering.

with Tamal K. Dey and Anastasios SidiropoulosComputational Geometry Theory and Application, Volume 76.

2017

Temporal Hierarchical Clustering.

with Tamal K. Dey and Anastasios Sidiropoulos28th International Symposium on Algorithms and Computation (ISAAC 2017).

2017

Temporal Clustering.

with Tamal K. Dey and Anastasios Sidiropoulos25th Annual European Symposium on Algorithms (ESA 2017).

2009

Polyak-Viro Formulas for the Coefficients of the Conway Polynomial.

with S. Chmutov and M. KhouryJournal of Knot Theory and Its Ramifications, 18.6.

Patents

2025

Systems and Methods for Reduction of Privacy Risk in Data.

with Joseph J. Regensburger and Sophie Stalla-BourdillonUS Patent 12,271,364.

2024

Systems and Methods to Enhance Privacy through Decision Tree Based Suppression Rules on Relational Databases.

with John R. Murray, Joseph J. Regensburger, and Mason SharpUS Patent 11,960,624.

2023

Systems and Methods for Privacy-Enhancing Modification of a Database Query.

with Kyle Thomas Lilly, Joseph J. Regensburger, and Mason SharpUS Patent 11,783,077.

2023

Systems and Methods for Obscuring Data from a Data Source. (Continuation.)

with Joseph J. Regensburger, Andrew D. Burt, and Barry R. HammenUS Patent 11,734,452.

2023

Systems and Methods for Privacy-Enhancing Transformation of a SQL Query.

with Kyle Thomas Lilly, Joseph J. Regensburger, and Mason SharpUS Patent 11,593,506.

2022

Systems and Methods for Obscuring Data from a Data Source.

with Joseph J. Regensburger, Andrew D. Burt, and Barry R. HammenUS Patent 11,443,065.

Patent Applications

2026

Systems and Methods for Classifying a Data Source Containing String Values.

with Arthur J. Neuman III and Joseph J. RegensburgerUS Patent Application Publication 2026/0252666. Pending.

2024

Systems and Methods for Determining a Risk Level of Data in a Response to Queries to a Database.

with Joseph J. Regensburger and Sophie Stalla-BourdillonUS Patent Application Publication 2024/0249014. Pending.

Advisory Activities

2026

The Battle for Data Availability under EU Digital Regulation: Anonymisation, Reuse, and the Future of Personal Data.

Expert Workshop. Brussels Privacy Hub, Vrije Universiteit Brussel.

Invited participant.

2025

Consultation on the data protection-compliant handling of personal data in AI models.

with Sophie Stalla-BourdillonThe German Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Consultation response, and invited expert at the follow-up roundtable (October 9, 2025).

2022

PETs for Health Data.

Solution Development Workshop. Pets for Public Good. The Information Commissioner's Office (ICO) of the United Kingdom.

Workshop panelist discussing the use of PETs in the context of health data.

2022

PETs Experts Forum.

The Information Commissioner's Office (ICO) of the United Kingdom.

with Sophie Stalla-Bourdillon

Comments on European Data Protection Board (EDPB) draft recommendations on the use of PETs in the context of the European General Data Protection Regulation (GDPR).

2020

Technologies for the Ethical Deployment of Algorithms.

Business Data Ethics Forum, The Moritz College of Law Program on Data and Governance.

Workshop panelist discussing the ethical use of AI in decision making processes.

2020

Private Set Intersection.

The Information Commissioner's Office (ICO) of the United Kingdom.

Met with the ICO to discuss legal and technical aspects of data sharing using PSI.

2019

PETs Expert Roundtable.

The Information Commissioner's Office (ICO) of the United Kingdom.

Presentations, Lectures, & Workshops

2026

De-Identification at the Intersection of Law and Technology.

with Sophie Stalla-Bourdillon

Level-setting workshop at the invitation-only Regulatory Strategy Roundtable Notions of Personal Data in the Digital Omnibus: How to Uphold a Principles-Based Approach? Future of Privacy Forum and Brussels Privacy Hub, in collaboration with the LSTS Research Group, Vrije Universiteit Brussel. FARI, Brussels. (Presented online.)

2023

On Unconditional PET love & a few inconsistencies.

with Sophie Stalla-Bourdillon

Summer Academy For Global Privacy Law 2023. Brussels Privacy Hub. Vrije Universiteit Brussel.

2023

Designing a Private Approach.

Summer Academy For Global Privacy Law 2023. Brussels Privacy Hub. Vrije Universiteit Brussel.

with Sophie Stalla-Bourdillon

State of Play of De-identification Techniques. Future of Privacy Forum Master Class at Computers, Privacy & Data Protection (CPDP2022) in Brussels, Belgium.

2019

Your Guide to Understanding and Operationalizing the Privacy by Design Framework.

with Sophie Stalla-Bourdillon

Explained the role of privacy enhancing technologies in a technical/legal talk on Privacy by Design. Talk hosted by the International Association of Privacy Professionals and offered for Continuing-Privacy Education (CPE) credit.

2019

A Data Scientist's Guide to Preserving Privacy.

with Stephen Bailey

Explained the use of privacy-enhancing technologies such as k-anonymization, differential privacy in data science and machine learning.

2017

Temporal Clustering.

Presentation to CSE Industrial Advisory Board. Dept. of Computer Science & Engineering, The Ohio State University.

2017

Temporal Clustering.

CSE Student Research Poster Exhibition. Dept. of Computer Science & Engineering, The Ohio State University.

2016

Spectral concentration and greedy k-clustering.

CSE Student Research Poster Exhibition. Dept. of Computer Science & Engineering, The Ohio State University.

2015

Spectral concentration and greedy k-clustering.

Presentation to CSE Industrial Advisory Board. Dept. of Computer Science & Engineering, The Ohio State University.

2015

Spectral concentration and greedy k-clustering.

CSE Student Research Poster Exhibition. Dept. of Computer Science & Engineering, The Ohio State University.

2007

Constructive Generation of Arrow Diagram Formulas for the Coefficients of the Conway Polynomial

Young Mathematicians Conference, The Ohio State University.

2006

An Algorithm for Producing Arrow Diagram Formulas for the Coefficients of the Conway Polynomial

SUMs, James Madison University, Harrisonburg, VA.

Professional Experience

2022-now

Distinguished Scientist and Engineer

2018-2022

Research Scientist

Immuta, Columbus, OH

  • Pioneered cutting-edge SQL transformers for the integration of privacy mechanisms. Particularly, for rewriting aggregate queries to ensure differential privacy (US Patent 11,593,506, February 2023), and for achieving local differential privacy through randomized response (US Patent 11,783,077, October 2023).
  • Led the architectural design and contributed to the development of a system that infers database column types from column data without requiring explicit transfer. Notably, this locality-preserving system works remotely over a sample, offering PAC-like robustness guarantees.
  • Implemented critical cryptographic libraries, such as format-preserving encryption (FF1), order-preserving encryption (Boldyreva, Chenette, Lee, O'Neil), and AES.
  • Advanced format-preserving encryption and randomized response techniques to finite regular languages. This was achieved by creating an efficient library to enumerate the accepting set of a regular expression, supporting conversion between an accepted value and its index in constant time for a fixed pattern.
  • Developed effective best-effort solutions to hard combinatorial optimization problems such as reducing excess privilege in role-based access policies while simultaneously minimizing the number of replacement roles. (NP-hard to even approximate by reduction to boolean matrix factorization.)
  • Conceived and implemented a unique clustering algorithm that leverages minimum capacity constraints for k-anonymization.
  • Designed and implemented a novel one-pass streaming algorithm for constructing a k-anonymizing attribute suppression decision tree.
  • Conceived, developed, and implemented a framework for differential data risk assessment enabling, e.g., detection of queries that would inadvertently re-identify de-identified data.
  • Provided expert consultation to the company on modern best practices in mathematical privacy, including the application of differential privacy, zero-knowledge proofs, partially and fully homomorphic encryption, queries over encrypted data, and secure multi-party computation techniques.
  • Authored numerous scholarly papers and guidance materials on the application of Privacy-Enhancing Technologies (PETs).
  • Frequently served as an advisor to the UK Information Commissioner's Office (ICO) on the application of PETs, including active participation in the PETs Expert Forum (2021-2022) and PETs Expert Roundtable (September 9, 2019).
2017-2018

Founder and CTO

VentureTech Group, LLC. Columbus, OH

  • Advise company technical direction in accordance with best current practice, specifically in the areas of data model design, disaster recovery, internationalization, operations, scalability, security, software development methodology, system architecture, and user data privacy.
  • Establish policies and procedures for compliance, governance, and management of risk, especially in the handling of personal data under the General Data Protection Regulation (GDPR).
  • Developed a multi-tenant Learning Management Platform (VueJS, golang, Postgres, Google Cloud Platform, Kubernetes), currently in use by Cooper Tire & Rubber Company.
  • Architectural and technical lead on a product (under development) that optimizes vehicle service center resource utilization through smart appointment scheduling.
2014-2019

Founder and Developer

Alder Analytics, LLC. Columbus, OH

  • Developed novel cryptographic services to facilitate digital document signing.
  • Architected and developed an internationalized (multi-lingual) Learning Management System (C#, VueJS, ASP.NET MVC, MS SQL Server, Azure) for retailers. Currently in use by Under Armour to train third party sales associates (e.g. retail sales associates at Dick's Sporting Goods, Cabela's, ...) on Under Armour products.
  • Helped a top 30 U.S. Bank (by asset size) predict the cost of premiums associated with new account marketing campaigns.
  • Provided architectural direction and was sole backend developer (golang, Postgres) of a streaming music application (SavageTrap). App was a five star application in both iOS and Google Play stores, and had supported over 290k registered users at the time of shutdown.
  • Guided the transition of a top 250 U.S. website (by traffic) from traditional monolithic application architecture to distributed, containerized microservice architecture enhancing availability and fault-tolerance.
  • Developed several high-performance application-specific reverse proxies (golang) responsible for operations such as realtime forensic analysis of web traffic, realtime marketing analytics (Druid, Hadoop, Kafka, Zookeeper), template expansion, and load balancing (among others).
  • Migrated traditional web-application infrastructure to containerized Docker-based cluster infrastructure with multihost-networking (Rancher, libnetwork) and automated service discovery (consul, etcd, skydock).
  • Implemented transparent distributed high performance real time traffic analysis for advertiser dashboards (golang, druid, zookeeper, kafka).
  • Applied best practices from distributed systems to architect highly available applications.
  • Developed a business intelligence portal (Java, OSGI) integrating Saiku BI with customer databases for a cloud-based sales management service.
  • Automated server provisioning with ansible.
2012-2015

Consultant

Battelle Memorial Institute, Columbus, OH

  • Provided consulting to Battelle, as needed, on a variety of topics in the realms of scientific computing and systems administration.
  • Consulted on the technical planning and feasibility analysis for the implementation of the next generation of Battelle's HPC cluster (Galileo).
  • Investigated graph layout algorithms for fast visualization of large (approximately 10,000-node) nearly-planar graphs for use in custom software tool for modeling large scale electrical networks.
  • Jointly supported a combined Linux / Windows Server environment including VMware ESXi and WebLogic application servers.
  • Jointly responsible for administration and support of 30+ node Linux HPC cluster.
2012-2014

Operations Manager and Lead DevOps Engineer

Action Verb, LLC. Las Vegas, NV

  • Responsible for designing, implementing, monitoring, and maintaining efficient and fault-tolerant infrastructure for highly available web applications.
  • Developed custom DAV (milton.io-based), SFTP (apache mina-based), FTP (mina-based) file servers in Java enabling customer access to files stored in BrickFTP (the company's flag-ship product).
  • Instrumented code to capture performance data from applications in production, enabling real-time monitoring and analysis.
  • Maintainer of Action Verb's heavily modified internal branch of S3FS (a fuse based file system (C++) backed with Amazon's S3 service.)
  • Developed drop-in extension libraries enabling hosted applications to interface with Action Verb's deployment platform.
  • Automated infrastructure deployment with Chef (Ruby).
  • Systems Administrator for 50+ Linux servers (Ubuntu, RHEL) and several MySQL databases. Systems covered included DNS, FTP, SVN, NFS, mail, web, and application servers.
  • Worked extensively with Amazon AWS services including EC2, S3, IAM, RDS, and VPC.
2007-2012

Researcher

Energetic Systems & Security Technology, Battelle Memorial Institute

  • Aided in the design of physical test articles and developed computer-vision based analysis software for performing diagnostic evaluation of multi-view, multi-energy transmission x-ray systems.
  • Performed mathematical modeling of the system response of CT scanners and statistical analysis of CT images for diagnostic evaluation.
  • Developed applications for the visualization of tomographic reconstructions of CT data and image analysis.
  • Analyzed the evolving DICOS standard (a data storage and interchange standard for security imaging devices based on the medical data acquisition standard DICOM), and developed DICOS related software tools. Most notably, a configurable rule based validator for DICOS data sets.
  • Performed mathematical modeling of general sensor / system response, with an additional focus on heat flux sensors for use in gathering burn injury prediction data.
  • Responsible for supporting group efforts which require software development, most notably a software package for the automated post-processing of test data and report generation.
  • Jointly responsible for the design, administration, and continued functioning of the group high-performance computing cluster.
  • Recipient of 5 outstanding performance awards, and pending nomination for the Emerging Scientist award at time of departure.

Teaching

2017-2023

Foundations I: Discrete Structures (CSE 2321)

Dept. of Computer Science & Engineering, The Ohio State University

Taught Fall 2017, Spring 2018, Fall 2018, Spring 2019, Spring 2020, Fall 2022, and Spring 2023.

  • Topics include propositional and first-order logic, basic mathematical proof techniques, graphs, analysis of algorithms, asymptotic analysis, solving recurrence relations, and basic sorting and searching.
2022

Machine Learning and Statistical Pattern Recognition (CSE 5523)

Dept. of Computer Science & Engineering, The Ohio State University

  • Topics include concentration inequalities, probability theory, formal learning models (including the PAC, mistake-bound, consistency, and agnostic PAC models), VC dimension, formal models of privacy and their use in machine learning.
2021

Foundations II: Data Structures and Algorithms (CSE 2331)

Dept. of Computer Science & Engineering, The Ohio State University

  • Topics include design and analysis of algorithms and data structures, divide-and-conquer, sorting and selection, search trees, hashing, graph algorithms, string matching, probabilistic analysis, randomized algorithms, and NP-completeness.

Blogs

with Andrew Burt and Sophie Stalla-BourdillonThe Privacy Advisor, IAPP.

DATAVERSITY's Industry Expert Blog Series.

with Andrew Burt and Sophie Stalla-BourdillonThe Privacy Advisor, IAPP.

with Andrew Burt and Sophie Stalla-BourdillonThe Privacy Advisor, IAPP.

Other Academic & Professional Experience

2008-2009

Teaching Assistant

Dept. of Physics, The Ohio State University

  • Taught recitation courses and labs corresponding to calculus-based mechanics (Physics 131 Autumn 2008), and calculus-based electrostatics (Physics 132).
2007

Instructor

Dept. of Mathematics, The Ohio State University

  • Responsible for teaching the recitation course corresponding to Math 150 (Autumn 2007), grading, holding office hours, and working one-on-one to tutor and enhance student's understanding of pre-calculus mathematics.
2006-2007

Proprietor

thatvideogamesite.com

  • Developed several websites for the purpose of selling online advertising.
  • thatvideogamesite.com (sold 10/2007): Developed flash game site in PHP. Implemented custom caching system for reducing system load under heavy traffic from digg, fark, and addictinggames.com.
  • theunverse.net (no longer online): Social link sharing site developed in Ruby on Rails. Developed javascript heavy front-end with script.aculo.us. Profiled extensively to identify and mitigate bottlenecks in ActiveRecord queries.
2004-2007

Programmer

Condensed Matter Physics Group, Dept. of Physics, The Ohio State University

  • Implemented numerous custom software packages including a web based system for submitting molecular dynamics simulation jobs to a supercomputer, and custom visualization software in C++ for displaying and animating the results of such a simulation.
  • Evaluated the efficacy of Bezier curves in the modeling of physical potentials.
2003-2004

Student Researcher

High Energy Physics Group, Dept. of Physics, The Ohio State University

  • Conceived, designed, and implemented a custom software package to help oversee the manufacturing, testing, and shipment of components for the Stanford Linear Accelerator.
  • Interfaced custom test equipment with centralized back-end database.

Languages, Libraries, Packages, Platforms, and Technologies

Languages
C, C++, C#, Clay, Go (golang), Haskell, HaXe, Java, Javascript, OCaml, PHP, Python, Ruby, Rust, TypeScript, x86 and z80 assembly.
Libraries
Boost, Elixir, jQuery, Qt, numpy, OpenCV, Ruby on Rails, scipy, SQLAlchemy, VueJS, wxWidgets.
Packages
Ansible, Apache HTTPd, Cacti, Chef, Consul, Docker, Doxygen, etcd, Git, Kafka, lighttpd, Maui, Mercurial, Nginx, Salt, TORQUE Resource Manager, Redmine, Subversion, Zookeeper.
Platforms
(Unix-likes) Darwin/OSX, Linux, OpenBSD. (Runtime Environments) .NET, Java. (Cloud Providers) Amazon Web Services, Google Cloud Platform, Microsoft Azure. (Container Orchestration) Docker Swarm, Rancher, Kubernetes.
Markup
CSS, HTML, Markdown.
Database Engines
(Relational) MS SQL Server, MySQL, Postgres, and SQLite. (Time-Series) Druid, InfluxDB.
Visualization
OpenGL, VTK.