Interesting, but what's to prevent the person selling the data from completely fabricating it (as opposed to following noise according to some differential privacy algorithm)? Or is the assumption that enough data owners are truthful that you could filter out this behaviour?