PFR inherits PTR's 'test first, then release' idea, but replaces 'test' with 'filter': it directly constructs a subset satisfying the low-sensitivity condition via privatized filtering, and then releases the result.