ER-AE: Differentially Private Text Generation for Authorship Anonymization
Not on the map. Why?
Abstract (arXiv)
Most of privacy protection studies for textual data focus on removing explicit sensitive identifiers. However, personal writing style, as a strong indicator of the authorship, is often neglected. Recent studies, such as SynTF, have shown promising results on privacy-preserving text mining. However, their anonymization algorithm can only output numeric term vectors which are difficult for the recipients to interpret. We propose a novel text generation model with a two-set exponential mechanism for authorship anonymization. By augmenting the semantic information through a REINFORCE training reward function, the model can generate differentially private text that has a close semantic and similar grammatical structure to the original text while removing personal traits of the writing style. It does not assume any conditioned labels or paralleled text data for training. We evaluate the performance of the proposed model on the real-life peer reviews dataset and the Yelp review dataset. The result suggests that our model outperforms the state-of-the-art on semantic preservation, authorship obfuscation, and stylometric transformation.
Key facts. Cited by 35 papers in the map (data through 7 Oct 2026). First posted on arXiv 20 Jul 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 7; 2023: 6; 2024: 8; 2025: 8; 2026: 3.
35 papers.
Sort:
By area:
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2022The Limits of Word Level Differential Privacycited by 63
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 38
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022DP-Rewrite: Towards Reproducibility and Transparency in Differentially Private Text Rewritingcited by 28
- 2023DP-BART for Privatized Text Rewriting under Local Differential Privacycited by 27
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restorationcited by 27
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directionscited by 20
- 2025A False Sense of Privacy: Evaluating Textual Data Sanitization Beyond Surface-level Privacy Leakagecited by 15
- 2021Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profilingcited by 12
- 2022Differential Privacy in Natural Language Processing: The Story So Farcited by 12
23 more
- 20241-Diffractor: Efficient and Utility-Preserving Text Obfuscation Leveraging Word-Level Metric Differential Privacycited by 10
- 2024Keep It Private: Unsupervised Privatization of Online Textcited by 10
- 2024Just Rewrite It Again: A Post-Processing Method for Enhanced Semantic Similarity and Privacy Preservation of Differentially Private Rewritten Textcited by 9
- 2024NAP^2: A Benchmark for Naturalness and Privacy-Preserving Text Rewriting by Learning from Humancited by 8
- 2025On the Impact of Noise in Differentially Private Text Rewritingcited by 8
- 2021From Theories on Styles to their Transfer in Text: Bridging the Gap with a Hierarchical Surveycited by 5
- 2025Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewritingcited by 5
- 2024Style Transfer with Multi-iteration Preference Optimizationcited by 4
- 2022A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscationcited by 3
- 2023Crowdsourcing on Sensitive Data with Privacy-Preserving Text Rewritingcited by 3
- 2023Making Translators Privacy-aware on the User's Sidecited by 3
- 2025Leveraging Semantic Triples for Private Document Generation with Local Differential Privacy Guaranteescited by 3
- 2025Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Searchcited by 3
- 2022Reproduction and Replication of an Adversarial Stylometry Experimentcited by 2
- 2025Inspecting the Representation Manifold of Differentially-Private Textcited by 2
- 2023Defending Against Authorship Identification Attackscited by 1
- 2025Investigating User Perspectives on Differentially Private Text Privatizationcited by 1
- 2021Protecting Anonymous Speech: A Generative Adversarial Network Methodology for Removing Stylistic Indicators in Textcited by 0
- 2024Characterizing Stereotypical Bias from Privacy-preserving Pre-Trainingcited by 0
- 2025Personalized Author Obfuscation with Large Language Modelscited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatizationcited by 0
- 2026I Am No One: Style-Aware Paraphrasing for Text Anonymizationcited by 0
- 2026DP-IPI: A Hybrid Differential Privacy Text Rewriting Mechanism for Indirect Personal Identifiers in Clinical Textscited by 0
- 2026I Am No One: Style-Aware Paraphrasing for Text Anonymization11 Sep 2026
- 2026DP-IPI: A Hybrid Differential Privacy Text Rewriting Mechanism for Indirect Personal Identifiers in Clinical Texts31 Aug 2026
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2025Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Search25 Sep 2025
- 2025Leveraging Semantic Triples for Private Document Generation with Local Differential Privacy Guarantees28 Aug 2025
- 2025Personalized Author Obfuscation with Large Language Models17 May 2025
- 2025A False Sense of Privacy: Evaluating Textual Data Sanitization Beyond Surface-level Privacy Leakage28 Apr 2025
- 2025Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewriting28 Mar 2025
- 2025Inspecting the Representation Manifold of Differentially-Private Text19 Mar 2025
- 2025Investigating User Perspectives on Differentially Private Text Privatization12 Mar 2025
- 2025On the Impact of Noise in Differentially Private Text Rewriting31 Jan 2025
- 2024LLM-PBE: Assessing Data Privacy in Large Language Models23 Aug 2024
23 more
- 2024Characterizing Stereotypical Bias from Privacy-preserving Pre-Training30 Jun 2024
- 2024Style Transfer with Multi-iteration Preference Optimization17 Jun 2024
- 2024NAP^2: A Benchmark for Naturalness and Privacy-Preserving Text Rewriting by Learning from Human6 Jun 2024
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration3 Jun 2024
- 2024Just Rewrite It Again: A Post-Processing Method for Enhanced Semantic Similarity and Privacy Preservation of Differentially Private Rewritten Text30 May 2024
- 2024Keep It Private: Unsupervised Privatization of Online Text16 May 2024
- 20241-Diffractor: Efficient and Utility-Preserving Text Obfuscation Leveraging Word-Level Metric Differential Privacy2 May 2024
- 2023Making Translators Privacy-aware on the User's Side7 Dec 2023
- 2023Defending Against Authorship Identification Attacks2 Oct 2023
- 2023SoK: Privacy-Preserving Data Synthesis5 Jul 2023
- 2023Crowdsourcing on Sensitive Data with Privacy-Preserving Text Rewriting6 Mar 2023
- 2023DP-BART for Privatized Text Rewriting under Local Differential Privacy15 Feb 2023
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directions22 Jan 2023
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipe25 Oct 2022
- 2022Differentially Private Language Models for Secure Data Sharing25 Oct 2022
- 2022DP-Rewrite: Towards Reproducibility and Transparency in Differentially Private Text Rewriting22 Aug 2022
- 2022Differential Privacy in Natural Language Processing: The Story So Far17 Aug 2022
- 2022Reproduction and Replication of an Adversarial Stylometry Experiment15 Aug 2022
- 2022The Limits of Word Level Differential Privacy2 May 2022
- 2022A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscation22 Mar 2022
- 2021From Theories on Styles to their Transfer in Text: Bridging the Gap with a Hierarchical Survey29 Oct 2021
- 2021Protecting Anonymous Speech: A Generative Adversarial Network Methodology for Removing Stylistic Indicators in Text18 Oct 2021
- 2021Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling27 Jan 2021
- 2024Style Transfer with Multi-iteration Preference Optimization17 Jun 2024
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2022The Limits of Word Level Differential Privacycited by 63
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 38
- 2023SoK: Privacy-Preserving Data Synthesiscited by 37
- 2022DP-Rewrite: Towards Reproducibility and Transparency in Differentially Private Text Rewritingcited by 28
- 2023DP-BART for Privatized Text Rewriting under Local Differential Privacycited by 27
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restorationcited by 27
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directionscited by 20
- 2025A False Sense of Privacy: Evaluating Textual Data Sanitization Beyond Surface-level Privacy Leakagecited by 15
- 2021Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profilingcited by 12
- 2022Differential Privacy in Natural Language Processing: The Story So Farcited by 12
12 most cited of 34 All 34 (JSON)
- 2026I Am No One: Style-Aware Paraphrasing for Text Anonymization11 Sep 2026
- 2026DP-IPI: A Hybrid Differential Privacy Text Rewriting Mechanism for Indirect Personal Identifiers in Clinical Texts31 Aug 2026
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2025Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Search25 Sep 2025
- 2025Leveraging Semantic Triples for Private Document Generation with Local Differential Privacy Guarantees28 Aug 2025
- 2025Personalized Author Obfuscation with Large Language Models17 May 2025
- 2025A False Sense of Privacy: Evaluating Textual Data Sanitization Beyond Surface-level Privacy Leakage28 Apr 2025
- 2025Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewriting28 Mar 2025
- 2025Inspecting the Representation Manifold of Differentially-Private Text19 Mar 2025
- 2025Investigating User Perspectives on Differentially Private Text Privatization12 Mar 2025
- 2025On the Impact of Noise in Differentially Private Text Rewriting31 Jan 2025
- 2024LLM-PBE: Assessing Data Privacy in Large Language Models23 Aug 2024
12 newest of 34 All 34 (JSON)