Private Reinforcement Learning with PAC and Regret Guarantees
Not on the map. Why?
Abstract (arXiv)
Motivated by high-stakes decision-making domains like personalized medicine where user information is inherently sensitive, we design privacy preserving exploration policies for episodic reinforcement learning (RL). We first provide a meaningful privacy formulation using the notion of joint differential privacy (JDP)--a strong variant of differential privacy for settings where each user receives their own sets of output (e.g., policy recommendations). We then develop a private optimism-based learning algorithm that simultaneously achieves strong PAC and regret bounds, and enjoys a JDP guarantee. Our algorithm only pays for a moderate privacy cost on exploration: in comparison to the non-private bounds, the privacy parameter only appears in lower-order terms. Finally, we present lower bounds on sample complexity and regret for reinforcement learning subject to JDP.
Key facts. Cited by 51 papers in the map (data through 7 Oct 2026). First posted on arXiv 18 Sep 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 12; 2022: 12; 2023: 6; 2024: 9; 2025: 6; 2026: 6.
51 papers.
Sort:
By area:
- 2021Large Scale Private Learning via Low-rank Reparametrizationcited by 87
- 2022When Privacy Meets Partial Information: A Refined Analysis of Differentially Private Banditscited by 28
- 2022Shuffle Private Linear Contextual Banditscited by 27
- 2021Optimal Rates of (Locally) Differentially Private Heavy-tailed Multi-Armed Banditscited by 25
- 2021Differentially Private Regret Minimization in Episodic Markov Decision Processescited by 23
- 2022Differentially Private Reinforcement Learning with Linear Function Approximationcited by 22
- 2022Offline Reinforcement Learning with Differential Privacycited by 19
- 2021Privacy Amplification via Shuffling for Linear Contextual Banditscited by 17
- 2022Near-Optimal Differentially Private Reinforcement Learningcited by 16
- 2023Reinforcement Unlearningcited by 16
- 2024MAD-TD: Model-Augmented Data stabilizes High Update Ratio RLcited by 16
- 2021Deceptive Reinforcement Learning for Privacy-Preserving Planningcited by 14
38 more
- 2022Distributed Differential Privacy in Multi-Armed Banditscited by 14
- 2021Locally Differentially Private Reinforcement Learning for Linear Mixture Markov Decision Processescited by 13
- 2021No-Regret Algorithms for Private Gaussian Process Bandit Optimizationcited by 11
- 2021Differentially Private Exploration in Reinforcement Learning with Linear Representationcited by 11
- 2022Improved Regret for Differentially Private Exploration in Linear MDPcited by 8
- 2022Doubly Fair Dynamic Pricingcited by 8
- 2021Adaptive Control of Differentially Private Linear Quadratic Systemscited by 7
- 2022Differentially Private Temporal Difference Learning with Stochastic Nonconvex-Strongly-Concave Optimizationcited by 7
- 2022New Challenges in Reinforcement Learning: A Survey of Security and Privacycited by 7
- 2021How Private Is Your RL Policy? An Inverse RL Based Analysis Frameworkcited by 5
- 2023Multi-Agent Reinforcement Learning: Methods, Applications, Visionary Prospects, and Challengescited by 5
- 2023Differentially Private Episodic Reinforcement Learning with Heavy-tailed Rewardscited by 4
- 2023Privacy Risks in Reinforcement Learning for Household Robotscited by 4
- 2021Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learningcited by 3
- 2025Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learningcited by 3
- 2025SquarechiPO: Differentially Private and Robust chi2-Preference Optimization in Offline Direct Alignmentcited by 3
- 2025On the Sample Complexity of Differentially Private Policy Optimizationcited by 3
- 2025Improved Bounds for Private and Robust Alignmentcited by 3
- 2022Stability and Generalization of Differentially Private Minimax Problemscited by 2
- 2023Concurrent Shuffle Differential Privacy Under Continual Observationcited by 2
- 2025KL-regularization Itself is Differentially Private in Bandits and RLHFcited by 2
- 2021Reinforcement Learning on Encrypted Datacited by 1
- 2022Privacy-Preserving Reinforcement Learning Beyond Expectationcited by 1
- 2023Privacy-Engineered Value Decomposition Networks for Cooperative Multi-Agent Reinforcement Learningcited by 1
- 2024Differentially Private Deep Model-Based Reinforcement Learningcited by 1
- 2024Differentially Private Reinforcement Learning with Self-Playcited by 1
- 2024FLIPHAT: Joint Differential Privacy for High Dimensional Sparse Linear Banditscited by 1
- 2024Privacy Preserving Reinforcement Learning for Population Processescited by 1
- 2024Preserving the Privacy of Reward Functions in MDPs through Deceptioncited by 1
- 2024Noise is All You Need: Private Second-Order Convergence of Noisy SGDcited by 1
- 2024Near-Optimal Reinforcement Learning with Shuffle Differential Privacycited by 1
- 2026Exact Unlearning in Reinforcement Learningcited by 1
- 2024Preserving Expert-Level Privacy in Offline Reinforcement Learningcited by 0
- 2025Towards Optimal Differentially Private Regret Bounds in Linear MDPscited by 0
- 2026Barriers to Counterfactual Credit Attribution for Autoregressive Modelscited by 0
- 2026Privacy Preserving Reinforcement Learning with One-Sided Feedbackcited by 0
- 2026Private and Stable Test-Time Adaptation with Differential Privacycited by 0
- 2026Randomized Least Squares Value Iteration itself is Joint Differentially Privatecited by 0
50 most cited of 51 All 51 (JSON)
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control23 Sep 2026
- 2026Exact Unlearning in Reinforcement Learning2 Jun 2026
- 2026Randomized Least Squares Value Iteration itself is Joint Differentially Private1 Jun 2026
- 2026Private and Stable Test-Time Adaptation with Differential Privacy1 Jun 2026
- 2026Privacy Preserving Reinforcement Learning with One-Sided Feedback18 May 2026
- 2026Barriers to Counterfactual Credit Attribution for Autoregressive Models2 May 2026
- 2025Improved Bounds for Private and Robust Alignment29 Dec 2025
- 2025On the Sample Complexity of Differentially Private Policy Optimization24 Oct 2025
- 2025SquarechiPO: Differentially Private and Robust chi2-Preference Optimization in Offline Direct Alignment27 May 2025
- 2025Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learning27 May 2025
- 2025KL-regularization Itself is Differentially Private in Bandits and RLHF23 May 2025
- 2025Towards Optimal Differentially Private Regret Bounds in Linear MDPs12 Apr 2025
38 more
- 2024Preserving Expert-Level Privacy in Offline Reinforcement Learning18 Nov 2024
- 2024Near-Optimal Reinforcement Learning with Shuffle Differential Privacy18 Nov 2024
- 2024MAD-TD: Model-Augmented Data stabilizes High Update Ratio RL11 Oct 2024
- 2024Noise is All You Need: Private Second-Order Convergence of Noisy SGD9 Oct 2024
- 2024Preserving the Privacy of Reward Functions in MDPs through Deception13 Jul 2024
- 2024Privacy Preserving Reinforcement Learning for Population Processes25 Jun 2024
- 2024FLIPHAT: Joint Differential Privacy for High Dimensional Sparse Linear Bandits22 May 2024
- 2024Differentially Private Reinforcement Learning with Self-Play11 Apr 2024
- 2024Differentially Private Deep Model-Based Reinforcement Learning8 Feb 2024
- 2023Reinforcement Unlearning26 Dec 2023
- 2023Privacy-Engineered Value Decomposition Networks for Cooperative Multi-Agent Reinforcement Learning13 Sep 2023
- 2023Privacy Risks in Reinforcement Learning for Household Robots15 Jun 2023
- 2023Differentially Private Episodic Reinforcement Learning with Heavy-tailed Rewards1 Jun 2023
- 2023Multi-Agent Reinforcement Learning: Methods, Applications, Visionary Prospects, and Challenges17 May 2023
- 2023Concurrent Shuffle Differential Privacy Under Continual Observation29 Jan 2023
- 2022New Challenges in Reinforcement Learning: A Survey of Security and Privacy31 Dec 2022
- 2022Near-Optimal Differentially Private Reinforcement Learning9 Dec 2022
- 2022Doubly Fair Dynamic Pricing23 Sep 2022
- 2022When Privacy Meets Partial Information: A Refined Analysis of Differentially Private Bandits6 Sep 2022
- 2022Distributed Differential Privacy in Multi-Armed Bandits12 Jun 2022
- 2022Offline Reinforcement Learning with Differential Privacy2 Jun 2022
- 2022Stability and Generalization of Differentially Private Minimax Problems11 Apr 2022
- 2022Privacy-Preserving Reinforcement Learning Beyond Expectation18 Mar 2022
- 2022Shuffle Private Linear Contextual Bandits11 Feb 2022
- 2022Improved Regret for Differentially Private Exploration in Linear MDP2 Feb 2022
- 2022Differentially Private Temporal Difference Learning with Stochastic Nonconvex-Strongly-Concave Optimization25 Jan 2022
- 2022Differentially Private Reinforcement Learning with Linear Function Approximation18 Jan 2022
- 2021Differentially Private Regret Minimization in Episodic Markov Decision Processes20 Dec 2021
- 2021Privacy Amplification via Shuffling for Linear Contextual Bandits11 Dec 2021
- 2021How Private Is Your RL Policy? An Inverse RL Based Analysis Framework10 Dec 2021
- 2021Differentially Private Exploration in Reinforcement Learning with Linear Representation2 Dec 2021
- 2021Locally Differentially Private Reinforcement Learning for Linear Mixture Markov Decision Processes19 Oct 2021
- 2021Reinforcement Learning on Encrypted Data16 Sep 2021
- 2021Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning8 Sep 2021
- 2021Adaptive Control of Differentially Private Linear Quadratic Systems26 Aug 2021
- 2021Large Scale Private Learning via Low-rank Reparametrization17 Jun 2021
- 2021Optimal Rates of (Locally) Differentially Private Heavy-tailed Multi-Armed Bandits4 Jun 2021
- 2021No-Regret Algorithms for Private Gaussian Process Bandit Optimization24 Feb 2021
50 newest of 51 All 51 (JSON)
- 2022Offline Reinforcement Learning with Differential Privacycited by 19
- 2025Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learningcited by 3
- 2024Differentially Private Deep Model-Based Reinforcement Learningcited by 1
- 2024Preserving Expert-Level Privacy in Offline Reinforcement Learningcited by 0
- 2025Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learning27 May 2025
- 2024Preserving Expert-Level Privacy in Offline Reinforcement Learning18 Nov 2024
- 2024Differentially Private Deep Model-Based Reinforcement Learning8 Feb 2024
- 2022Offline Reinforcement Learning with Differential Privacy2 Jun 2022
- 2021Large Scale Private Learning via Low-rank Reparametrizationcited by 87
- 2022When Privacy Meets Partial Information: A Refined Analysis of Differentially Private Banditscited by 28
- 2022Shuffle Private Linear Contextual Banditscited by 27
- 2021Optimal Rates of (Locally) Differentially Private Heavy-tailed Multi-Armed Banditscited by 25
- 2021Differentially Private Regret Minimization in Episodic Markov Decision Processescited by 23
- 2022Differentially Private Reinforcement Learning with Linear Function Approximationcited by 22
- 2021Privacy Amplification via Shuffling for Linear Contextual Banditscited by 17
- 2022Near-Optimal Differentially Private Reinforcement Learningcited by 16
- 2024MAD-TD: Model-Augmented Data stabilizes High Update Ratio RLcited by 16
- 2021Deceptive Reinforcement Learning for Privacy-Preserving Planningcited by 14
- 2022Distributed Differential Privacy in Multi-Armed Banditscited by 14
- 2021Locally Differentially Private Reinforcement Learning for Linear Mixture Markov Decision Processescited by 13
12 most cited of 40 All 40 (JSON)
- 2026Randomized Least Squares Value Iteration itself is Joint Differentially Private1 Jun 2026
- 2026Private and Stable Test-Time Adaptation with Differential Privacy1 Jun 2026
- 2026Privacy Preserving Reinforcement Learning with One-Sided Feedback18 May 2026
- 2026Barriers to Counterfactual Credit Attribution for Autoregressive Models2 May 2026
- 2025On the Sample Complexity of Differentially Private Policy Optimization24 Oct 2025
- 2025Towards Optimal Differentially Private Regret Bounds in Linear MDPs12 Apr 2025
- 2024Near-Optimal Reinforcement Learning with Shuffle Differential Privacy18 Nov 2024
- 2024MAD-TD: Model-Augmented Data stabilizes High Update Ratio RL11 Oct 2024
- 2024Noise is All You Need: Private Second-Order Convergence of Noisy SGD9 Oct 2024
- 2024Preserving the Privacy of Reward Functions in MDPs through Deception13 Jul 2024
- 2024Privacy Preserving Reinforcement Learning for Population Processes25 Jun 2024
- 2024FLIPHAT: Joint Differential Privacy for High Dimensional Sparse Linear Bandits22 May 2024
12 newest of 40 All 40 (JSON)