4. The method of claim 1 , further comprising, receiving by the computer at least one of the policy or the one or more truth data sets via a computer network.
1. A computer-implemented method of ensuring selective disclosure of sensitive data: a computer storing in a memory one or more sets of truth data items, and at least one policy comprised of policy variables indicating which type of data items are sensitive, which type of data item is disclosable, validity conditions for a candidate disclosure dataset to be believable by a recipient, and sufficiency conditions specifying an extent of variability necessary among data objects in a disclosure candidate dataset to protect the sensitive data; the computer performing the steps of: producing a collection of synthetic dataset disclosure possibilities meeting the validity conditions; producing one or more associations between the policy variables and each synthetic dataset disclosure possibility meeting the validity conditions, and each of the one or more truth data sets; generating at least one candidate disclosure dataset from the collection of synthetic datasets disclosure possibilities and the truth data items comprising at least one of a synthetic dataset and a truth dataset, wherein respective values of the collection of synthetic dataset disclosure possibilities vary by at least the extent specified in the policy; and iteratively repeating the producing steps and the generating step until the associations corresponding to the at least one candidate disclosure dataset meet the sufficiency conditions of the at least one policy, and each of the at least one candidate disclosure dataset meets the validity conditions of the at least one policy; and performing at least one of the following actions: generating a certificate indicating that the at least one candidate disclosure dataset complies with the at least one policy; automatically providing the at least one candidate disclosure dataset to a recipient; or requesting approval from a holder of the sensitive data to disclose the at least one candidate disclosure dataset.