Introducing the VoicePrivacy Initiative
Not on the map. Why?
Abstract (arXiv)
The VoicePrivacy initiative aims to promote the development of privacy preservation tools for speech technology by gathering a new community to define the tasks of interest and the evaluation methodology, and benchmarking solutions through a series of challenges. In this paper, we formulate the voice anonymization task selected for the VoicePrivacy 2020 Challenge and describe the datasets used for system development and evaluation. We also present the attack models and the associated objective and subjective evaluation metrics. We introduce two anonymization baselines and report objective evaluation results.
Key facts. Cited by 48 papers in the map (data through 7 Oct 2026). First posted on arXiv 4 May 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 8; 2022: 12; 2023: 5; 2024: 10; 2025: 8; 2026: 5.
48 papers.
Sort:
- 2021The VoicePrivacy 2020 Challenge: Results and findingscited by 45
- 2024The VoicePrivacy 2024 Challenge Evaluation Plancited by 39
- 2022Anonymizing Speech with Generative Adversarial Networks to Preserve Speaker Privacycited by 20
- 2022The VoicePrivacy 2022 Challenge Evaluation Plancited by 18
- 2022Differentially Private Speaker Anonymizationcited by 16
- 2022Improving speaker de-identification with functional data analysis of f0 trajectoriescited by 11
- 2022Resource-Efficient Separation Transformercited by 11
- 2024The Impact of Speech Anonymization on Pathology and Its Limitscited by 11
- 2021Privacy attacks for automatic speech recognition acoustic models in a federated learning frameworkcited by 10
- 2022Are disentangled representations all you need to build speaker anonymization systems?cited by 10
- 2022Speaker Anonymization with Phonetic Intermediate Representationscited by 9
- 2024Privacy versus Emotion Preservation Trade-offs in Emotion-Preserving Speaker Anonymizationcited by 9
36 more
- 2021Learning De-identified Representations of Prosody from Raw Audiocited by 8
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymizationcited by 8
- 2021Configurable Privacy-Preserving Automatic Speech Recognitioncited by 7
- 2023Federated Learning for ASR based on Wav2vec 2.0cited by 7
- 2023SAIC: Integration of Speech Anonymization and Identity Classificationcited by 7
- 2022The VoicePrivacy 2020 Challenge Evaluation Plancited by 6
- 2025DarkStream: real-time speech anonymization with low latencycited by 6
- 2021Protecting gender and identity with disentangled speech representationscited by 5
- 2022Generating gender-ambiguous voices for privacy-preserving speech recognitioncited by 5
- 2024Analysis of Speech Temporal Dynamics in the Context of Speaker Verification and Voice Anonymizationcited by 5
- 2021On the invertibility of a voice privacy system using embedding alignementcited by 4
- 2022Fantomas: Understanding Face Anonymization Reversibilitycited by 4
- 2024Differential privacy enables fair and accurate AI-based analysis of speech disorders while protecting patient datacited by 4
- 2025The First VoicePrivacy Attacker Challengecited by 4
- 2026TVTSyn: Content-Synchronous Time-Varying Timbre for Streaming Voice Conversion and Anonymizationcited by 4
- 2022Sotto Voce: Federated Speech Recognition with Differential Privacy Guaranteescited by 3
- 2024Prosody-Driven Privacy-Preserving Dementia Detectioncited by 3
- 2025Exploiting Context-dependent Duration Features for Voice Anonymization Attack Systemscited by 3
- 2024Asynchronous Voice Anonymization Using Adversarial Perturbation On Speaker Embeddingcited by 2
- 2021Evaluating X-vector-based Speaker Anonymization under White-box Assessmentcited by 1
- 2022DeID-VC: Speaker De-identification via Zero-shot Pseudo Voice Conversioncited by 1
- 2023Evaluation of Speaker Anonymization on Emotional Speechcited by 1
- 2023Vocoder drift compensation by x-vector alignment in speaker anonymisationcited by 1
- 2024SEBA: Strong Evaluation of Biometric Anonymizationscited by 1
- 2025You Are What You Say: Exploiting Linguistic Content for VoicePrivacy Attackscited by 1
- 2025SEF-MK: Speaker-Embedding-Free Voice Anonymization through Multi-k-means Quantizationcited by 1
- 2025Target speaker anonymization in multi-speaker recordingscited by 1
- 2021Preliminary study on using vector quantization latent spaces for TTS/VC systems with consistent performancecited by 0
- 2023Beyond Neural-on-Neural Approaches to Speaker Gender Protectioncited by 0
- 2024Scenario of Use Scheme: Threat Model Specification for Speaker Privacy Protection in the Medical Domaincited by 0
- 2024The First VoicePrivacy Attacker Challenge Evaluation Plancited by 0
- 2025Perceptual implications of automatic anonymization in pathological speechcited by 0
- 2025Improving the Speaker Anonymization Evaluation's Robustness to Target Speakers with Adversarial Learningcited by 0
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Trainingcited by 0
- 2026Child-Centric Voice Anonymization in Single and Multi-Speaker Speech via Domain-Adapted SSL Modelscited by 0
- 2026Your Voice Cloning System is Secretly a Voice Anonymizercited by 0
- 2026Your Voice Cloning System is Secretly a Voice Anonymizer27 Aug 2026
- 2026Child-Centric Voice Anonymization in Single and Multi-Speaker Speech via Domain-Adapted SSL Models29 Jun 2026
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Training13 Mar 2026
- 2026TVTSyn: Content-Synchronous Time-Varying Timbre for Streaming Voice Conversion and Anonymization10 Feb 2026
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymization17 Jan 2026
- 2025Target speaker anonymization in multi-speaker recordings10 Oct 2025
- 2025DarkStream: real-time speech anonymization with low latency4 Sep 2025
- 2025Improving the Speaker Anonymization Evaluation's Robustness to Target Speakers with Adversarial Learning13 Aug 2025
- 2025SEF-MK: Speaker-Embedding-Free Voice Anonymization through Multi-k-means Quantization9 Aug 2025
- 2025Exploiting Context-dependent Duration Features for Voice Anonymization Attack Systems21 Jul 2025
- 2025You Are What You Say: Exploiting Linguistic Content for VoicePrivacy Attacks11 Jun 2025
- 2025Perceptual implications of automatic anonymization in pathological speech1 May 2025
36 more
- 2025The First VoicePrivacy Attacker Challenge19 Apr 2025
- 2024Analysis of Speech Temporal Dynamics in the Context of Speaker Verification and Voice Anonymization22 Dec 2024
- 2024The First VoicePrivacy Attacker Challenge Evaluation Plan9 Oct 2024
- 2024Differential privacy enables fair and accurate AI-based analysis of speech disorders while protecting patient data27 Sep 2024
- 2024Scenario of Use Scheme: Threat Model Specification for Speaker Privacy Protection in the Medical Domain24 Sep 2024
- 2024Privacy versus Emotion Preservation Trade-offs in Emotion-Preserving Speaker Anonymization5 Sep 2024
- 2024SEBA: Strong Evaluation of Biometric Anonymizations9 Jul 2024
- 2024Prosody-Driven Privacy-Preserving Dementia Detection3 Jul 2024
- 2024Asynchronous Voice Anonymization Using Adversarial Perturbation On Speaker Embedding12 Jun 2024
- 2024The Impact of Speech Anonymization on Pathology and Its Limits11 Apr 2024
- 2024The VoicePrivacy 2024 Challenge Evaluation Plan3 Apr 2024
- 2023SAIC: Integration of Speech Anonymization and Identity Classification23 Dec 2023
- 2023Vocoder drift compensation by x-vector alignment in speaker anonymisation17 Jul 2023
- 2023Beyond Neural-on-Neural Approaches to Speaker Gender Protection30 Jun 2023
- 2023Evaluation of Speaker Anonymization on Emotional Speech15 Apr 2023
- 2023Federated Learning for ASR based on Wav2vec 2.020 Feb 2023
- 2022Fantomas: Understanding Face Anonymization Reversibility19 Oct 2022
- 2022Anonymizing Speech with Generative Adversarial Networks to Preserve Speaker Privacy13 Oct 2022
- 2022DeID-VC: Speaker De-identification via Zero-shot Pseudo Voice Conversion9 Sep 2022
- 2022Are disentangled representations all you need to build speaker anonymization systems?22 Aug 2022
- 2022Sotto Voce: Federated Speech Recognition with Differential Privacy Guarantees16 Jul 2022
- 2022Speaker Anonymization with Phonetic Intermediate Representations11 Jul 2022
- 2022Generating gender-ambiguous voices for privacy-preserving speech recognition3 Jul 2022
- 2022Resource-Efficient Separation Transformer19 Jun 2022
- 2022The VoicePrivacy 2020 Challenge Evaluation Plan14 May 2022
- 2022Improving speaker de-identification with functional data analysis of f0 trajectories31 Mar 2022
- 2022The VoicePrivacy 2022 Challenge Evaluation Plan23 Mar 2022
- 2022Differentially Private Speaker Anonymization23 Feb 2022
- 2021Privacy attacks for automatic speech recognition acoustic models in a federated learning framework6 Nov 2021
- 2021On the invertibility of a voice privacy system using embedding alignement8 Oct 2021
- 2021Evaluating X-vector-based Speaker Anonymization under White-box Assessment24 Sep 2021
- 2021The VoicePrivacy 2020 Challenge: Results and findings1 Sep 2021
- 2021Learning De-identified Representations of Prosody from Raw Audio17 Jul 2021
- 2021Preliminary study on using vector quantization latent spaces for TTS/VC systems with consistent performance25 Jun 2021
- 2021Protecting gender and identity with disentangled speech representations22 Apr 2021
- 2021Configurable Privacy-Preserving Automatic Speech Recognition1 Apr 2021
- 2021The VoicePrivacy 2020 Challenge: Results and findingscited by 45
- 2024The VoicePrivacy 2024 Challenge Evaluation Plancited by 39
- 2022Anonymizing Speech with Generative Adversarial Networks to Preserve Speaker Privacycited by 20
- 2022The VoicePrivacy 2022 Challenge Evaluation Plancited by 18
- 2022Differentially Private Speaker Anonymizationcited by 16
- 2022Improving speaker de-identification with functional data analysis of f0 trajectoriescited by 11
- 2022Resource-Efficient Separation Transformercited by 11
- 2024The Impact of Speech Anonymization on Pathology and Its Limitscited by 11
- 2021Privacy attacks for automatic speech recognition acoustic models in a federated learning frameworkcited by 10
- 2022Are disentangled representations all you need to build speaker anonymization systems?cited by 10
- 2022Speaker Anonymization with Phonetic Intermediate Representationscited by 9
- 2024Privacy versus Emotion Preservation Trade-offs in Emotion-Preserving Speaker Anonymizationcited by 9
12 most cited of 48 All 48 (JSON)
- 2026Your Voice Cloning System is Secretly a Voice Anonymizer27 Aug 2026
- 2026Child-Centric Voice Anonymization in Single and Multi-Speaker Speech via Domain-Adapted SSL Models29 Jun 2026
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Training13 Mar 2026
- 2026TVTSyn: Content-Synchronous Time-Varying Timbre for Streaming Voice Conversion and Anonymization10 Feb 2026
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymization17 Jan 2026
- 2025Target speaker anonymization in multi-speaker recordings10 Oct 2025
- 2025DarkStream: real-time speech anonymization with low latency4 Sep 2025
- 2025Improving the Speaker Anonymization Evaluation's Robustness to Target Speakers with Adversarial Learning13 Aug 2025
- 2025SEF-MK: Speaker-Embedding-Free Voice Anonymization through Multi-k-means Quantization9 Aug 2025
- 2025Exploiting Context-dependent Duration Features for Voice Anonymization Attack Systems21 Jul 2025
- 2025You Are What You Say: Exploiting Linguistic Content for VoicePrivacy Attacks11 Jun 2025
- 2025Perceptual implications of automatic anonymization in pathological speech1 May 2025
12 newest of 48 All 48 (JSON)