Differentially Private Language Models Benefit from Public Pre-training
Not on the map. Why?
Abstract (arXiv)
Language modeling is a keystone task in natural language processing. When training a language model on sensitive information, differential privacy (DP) allows us to quantify the degree to which our private data is protected. However, training algorithms which enforce differential privacy often lead to degradation in model quality. We study the feasibility of learning a language model which is simultaneously high-quality and privacy preserving by tuning a public base model on a private corpus. We find that DP fine-tuning boosts the performance of language models in the private domain, making the training of such models possible.
Key facts. Cited by 46 papers in the map (data through 7 Oct 2026). First posted on arXiv 13 Sep 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 5; 2022: 8; 2023: 13; 2024: 9; 2025: 10; 2026: 1.
46 papers.
Sort:
By area:
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2021Selective Differential Privacy for Language Modelingcited by 61
- 2022THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryptioncited by 55
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2023Privacy-Preserving Parameter-Efficient Fine-Tuning for Large Language Model Servicescited by 43
- 2023Why Is Public Pretraining Necessary for Private Model Training?cited by 36
- 2022Submix: Practical Private Prediction for Large-Scale Language Modelscited by 31
- 2023Can Public Large Language Models Help Private Cross-device Federated Learning?cited by 30
- 2023Identifying and Mitigating Privacy Risks Stemming from Language Models: A Surveycited by 30
34 more
- 2023Split-and-Denoise: Protect large language model inference with local differential privacycited by 30
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Modelscited by 24
- 2023Selective Pre-training for Private Fine-tuningcited by 22
- 2022Sentence-level Privacy for Document Embeddingscited by 15
- 2024Fine-Tuning Language Models with Differential Privacy through Adaptive Noise Allocationcited by 14
- 2022Privacy-Preserving Domain Adaptation of Semantic Parserscited by 12
- 2022The Impact of Differential Privacy on Group Disparity Mitigationcited by 11
- 2021DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothingcited by 10
- 2022Can Foundation Models Help Us Achieve Perfect Secrecy?cited by 9
- 2023Optimal Differentially Private Model Training with Public Datacited by 9
- 2024LLM-based Privacy Data Augmentation Guided by Knowledge Distillation with a Distribution Tutor for Medical Text Classificationcited by 8
- 2025On the Impact of Noise in Differentially Private Text Rewritingcited by 8
- 2023Efficiency 360: Efficient Vision Transformerscited by 6
- 2024Privacy Bias in Language Models: A Contextual Integrity-based Auditing Metriccited by 6
- 2025An Investigation of Memorization Risk in Healthcare Foundation Modelscited by 5
- 2025Dual-Priv Pruning : Efficient Differential Private Fine-Tuning in Multimodal Large Language Modelscited by 4
- 2023ConfusionPrompt: Practical Private Inference for Online Large Language Modelscited by 3
- 2024Differentially Private Learning Needs Better Model Initialization and Self-Distillationcited by 3
- 2021Learning Domain Specific Language Models for Automatic Speech Recognition through Machine Translationcited by 2
- 2023Context-Aware Differential Privacy for Language Modelingcited by 2
- 2023LatticeGen: A Cooperative Framework which Hides Generated Text in a Lattice for Privacy-Aware Generation on Cloudcited by 2
- 2025Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunitiescited by 2
- 2025DP2Unlearning: An Efficient and Guaranteed Unlearning Framework for LLMscited by 2
- 2025PATCH: Mitigating PII Leakage in Language Models with Privacy-Aware Targeted Circuit PatcHingcited by 2
- 2023Differential Privacy, Linguistic Fairness, and Training Data Influence: Impossibility and Possibility Theorems for Multilingual Language Modelscited by 1
- 2024Privately Learning from Graphs with Applications in Fine-tuning Large Language Modelscited by 1
- 2025Empirical Calibration and Metric Differential Privacy in Language Modelscited by 1
- 2025NoEsis: Differentially Private Knowledge Transfer in Modular LLM Adaptationcited by 1
- 2025FlashDP: Private Training Large Language Models with Efficient DP-SGDcited by 1
- 2024IDT: Dual-Task Adversarial Attacks for Privacy Protectioncited by 0
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)cited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatizationcited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2025An Investigation of Memorization Risk in Healthcare Foundation Models14 Oct 2025
- 2025PATCH: Mitigating PII Leakage in Language Models with Privacy-Aware Targeted Circuit PatcHing8 Oct 2025
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025FlashDP: Private Training Large Language Models with Efficient DP-SGD1 Jul 2025
- 2025Dual-Priv Pruning : Efficient Differential Private Fine-Tuning in Multimodal Large Language Models8 Jun 2025
- 2025NoEsis: Differentially Private Knowledge Transfer in Modular LLM Adaptation25 Apr 2025
- 2025DP2Unlearning: An Efficient and Guaranteed Unlearning Framework for LLMs18 Apr 2025
- 2025Empirical Calibration and Metric Differential Privacy in Language Models18 Mar 2025
- 2025Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunities1 Feb 2025
- 2025On the Impact of Noise in Differentially Private Text Rewriting31 Jan 2025
- 2024Differentially Private Learning Needs Better Model Initialization and Self-Distillation23 Oct 2024
34 more
- 2024Privately Learning from Graphs with Applications in Fine-tuning Large Language Models10 Oct 2024
- 2024Fine-Tuning Language Models with Differential Privacy through Adaptive Noise Allocation3 Oct 2024
- 2024Undesirable Memorization in Large Language Models: A Survey3 Oct 2024
- 2024Privacy Bias in Language Models: A Contextual Integrity-based Auditing Metric5 Sep 2024
- 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Models30 Jun 2024
- 2024IDT: Dual-Task Adversarial Attacks for Privacy Protection28 Jun 2024
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs5 Jun 2024
- 2024LLM-based Privacy Data Augmentation Guided by Knowledge Distillation with a Distribution Tutor for Medical Text Classification26 Feb 2024
- 2023ConfusionPrompt: Practical Private Inference for Online Large Language Models30 Dec 2023
- 2023Locally Differentially Private Document Generation Using Zero Shot Prompting24 Oct 2023
- 2023Split-and-Denoise: Protect large language model inference with local differential privacy13 Oct 2023
- 2023LatticeGen: A Cooperative Framework which Hides Generated Text in a Lattice for Privacy-Aware Generation on Cloud29 Sep 2023
- 2023Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey27 Sep 2023
- 2023Differential Privacy, Linguistic Fairness, and Training Data Influence: Impossibility and Possibility Theorems for Multilingual Language Models17 Aug 2023
- 2023Optimal Differentially Private Model Training with Public Data26 Jun 2023
- 2023Selective Pre-training for Private Fine-tuning23 May 2023
- 2023Can Public Large Language Models Help Private Cross-device Federated Learning?20 May 2023
- 2023Privacy-Preserving Parameter-Efficient Fine-Tuning for Large Language Model Services10 May 2023
- 2023Why Is Public Pretraining Necessary for Private Model Training?19 Feb 2023
- 2023Efficiency 360: Efficient Vision Transformers16 Feb 2023
- 2023Context-Aware Differential Privacy for Language Modeling28 Jan 2023
- 2022Privacy-Preserving Domain Adaptation of Semantic Parsers20 Dec 2022
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clipping3 Dec 2022
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Survey14 Oct 2022
- 2022THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryption1 Jun 2022
- 2022Can Foundation Models Help Us Achieve Perfect Secrecy?27 May 2022
- 2022Sentence-level Privacy for Document Embeddings10 May 2022
- 2022The Impact of Differential Privacy on Group Disparity Mitigation5 Mar 2022
- 2022Submix: Practical Private Prediction for Large-Scale Language Models4 Jan 2022
- 2021Differentially Private Fine-tuning of Language Models13 Oct 2021
- 2021Large Language Models Can Be Strong Differentially Private Learners12 Oct 2021
- 2021Learning Domain Specific Language Models for Automatic Speech Recognition through Machine Translation21 Sep 2021
- 2021Selective Differential Privacy for Language Modeling30 Aug 2021
- 2021DPlis: Boosting Utility of Differentially Private Deep Learning via Randomized Smoothing2 Mar 2021
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2021Selective Differential Privacy for Language Modelingcited by 61
- 2022THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryptioncited by 55
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2023Privacy-Preserving Parameter-Efficient Fine-Tuning for Large Language Model Servicescited by 43
- 2023Why Is Public Pretraining Necessary for Private Model Training?cited by 36
- 2022Submix: Practical Private Prediction for Large-Scale Language Modelscited by 31
- 2023Can Public Large Language Models Help Private Cross-device Federated Learning?cited by 30
- 2023Identifying and Mitigating Privacy Risks Stemming from Language Models: A Surveycited by 30
12 most cited of 43 All 43 (JSON)
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2025An Investigation of Memorization Risk in Healthcare Foundation Models14 Oct 2025
- 2025PATCH: Mitigating PII Leakage in Language Models with Privacy-Aware Targeted Circuit PatcHing8 Oct 2025
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025FlashDP: Private Training Large Language Models with Efficient DP-SGD1 Jul 2025
- 2025NoEsis: Differentially Private Knowledge Transfer in Modular LLM Adaptation25 Apr 2025
- 2025Empirical Calibration and Metric Differential Privacy in Language Models18 Mar 2025
- 2025Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunities1 Feb 2025
- 2025On the Impact of Noise in Differentially Private Text Rewriting31 Jan 2025
- 2024Differentially Private Learning Needs Better Model Initialization and Self-Distillation23 Oct 2024
- 2024Privately Learning from Graphs with Applications in Fine-tuning Large Language Models10 Oct 2024
- 2024Fine-Tuning Language Models with Differential Privacy through Adaptive Noise Allocation3 Oct 2024
12 newest of 43 All 43 (JSON)