The VoicePrivacy 2020 Challenge: Results and findings
Not on the map. Why?
Abstract (arXiv)
This paper presents the results and analyses stemming from the first VoicePrivacy 2020 Challenge which focuses on developing anonymization solutions for speech technology. We provide a systematic overview of the challenge design with an analysis of submitted systems and evaluation results. In particular, we describe the voice anonymization task and datasets used for system development and evaluation. Also, we present different attack models and the associated objective and subjective evaluation metrics. We introduce two anonymization baselines and provide a summary description of the anonymization systems developed by the challenge participants. We report objective and subjective evaluation results for baseline and submitted systems. In addition, we present experimental results for alternative privacy metrics and attack models developed as a part of the post-evaluation analysis. Finally, we summarize our insights and observations that will influence the design of the next VoicePrivacy challenge edition and some directions for future voice anonymization research.
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 21 of its 81 references that are in the map. First posted on arXiv 1 Sep 2021.
Builds on
21 of 81 references.
References · 21
- 2018VoxCeleb2: Deep Speaker Recognitioncited by 862
- 2017VoxCeleb: a large-scale speaker identification datasetcited by 714
- 2019LibriTTS: A Corpus Derived from LibriSpeech for Text-to-Speechcited by 639
- 2018Federated Learning for Keyword Spottingcited by 95
- 2020Introducing the VoicePrivacy Initiativecited by 48
- 2019Speaker Anonymization Using X-vector and Neural Waveform Modelscited by 41
- 2020Speaker anonymisation using the McAdams coefficientcited by 38
- 2019Evaluating Voice Conversion-based Privacy Protection against Informed Attackerscited by 30
- 2020Design Choices for X-vector Based Speaker Anonymizationcited by 27
- 2020Privacy-preserving Voice Analysis via Disentangled Representationscited by 24
- 2019Privacy-Preserving Adversarial Representation Learning in ASR: Reality or Illusion?cited by 22
- 2019The GDPR & Speech Data: Reflections of Legal and Technology Communities, First Steps towards a Common Understandingcited by 18
9 more
- 2020Voice-Indistinguishability: Protecting Voiceprint in Privacy-Preserving Speech Data Releasecited by 12
- 2019Neural Harmonic-plus-Noise Waveform Model with Trainable Maximum Voice Frequency for Text-to-Speech Synthesiscited by 10
- 2021A Study of F0 Modification for X-Vector Based Speech Pseudonymization Across Gendercited by 9
- 2019Encrypted Speech Recognition using Deep Polynomial Networkscited by 8
- 2020Speech Pseudonymisation Assessment Using Voice Similarity Matricescited by 8
- 2017VoiceMask: Anonymize and Sanitize Voice Input on Mobile Devicescited by 7
- 2020The Privacy ZEBRA: Zero Evidence Biometric Recognition Assessmentcited by 6
- 2020Speaker Anonymization with Distribution-Preserving X-Vector Generation for the VoicePrivacy Challenge 2020cited by 5
- 2020Speaker De-identification System using Autoencoders and Adversarial Trainingcited by 5
Built on by
Citing papers per year: 2021: 1; 2022: 12; 2023: 5; 2024: 9; 2025: 6; 2026: 12.
45 papers.
Sort:
By area:
- 2024The VoicePrivacy 2024 Challenge Evaluation Plancited by 39
- 2022The VoicePrivacy 2022 Challenge Evaluation Plancited by 18
- 2022Differentially Private Speaker Anonymizationcited by 16
- 2022Exact Prosody Cloning in Zero-Shot Multispeaker Text-to-Speechcited by 13
- 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairnesscited by 13
- 2024The Impact of Speech Anonymization on Pathology and Its Limitscited by 11
- 2021Privacy attacks for automatic speech recognition acoustic models in a federated learning frameworkcited by 10
- 2022Speaker Anonymization with Phonetic Intermediate Representationscited by 9
- 2023Federated learning for secure development of AI models for Parkinson's disease detection using speech from different languagescited by 9
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymizationcited by 8
- 2023Federated Learning for ASR based on Wav2vec 2.0cited by 7
- 2024A Benchmark for Multi-speaker Anonymizationcited by 7
33 more
- 2025Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speechcited by 6
- 2022The effect of speech pathology on automatic speaker verification -- a large-scale studycited by 5
- 2022OOD-Probe: A Neural Interpretation of Out-of-Domain Generalizationcited by 5
- 2024Probing the Feasibility of Multilingual Speaker Anonymizationcited by 5
- 2024Analysis of Speech Temporal Dynamics in the Context of Speaker Verification and Voice Anonymizationcited by 5
- 2022Fantomas: Understanding Face Anonymization Reversibilitycited by 4
- 2024Differential privacy enables fair and accurate AI-based analysis of speech disorders while protecting patient datacited by 4
- 2025The First VoicePrivacy Attacker Challengecited by 4
- 2022Sotto Voce: Federated Speech Recognition with Differential Privacy Guaranteescited by 3
- 2024Exploratory Evaluation of Speech Content Maskingcited by 2
- 2022Self-Supervised Speech Representations Preserve Speech Characteristics while Anonymizing Voicescited by 1
- 2022DeID-VC: Speaker De-identification via Zero-shot Pseudo Voice Conversioncited by 1
- 2022An Experimental Study on Private Aggregation of Teacher Ensemble Learning for End-to-End Speech Recognitioncited by 1
- 2023On the Impact of Voice Anonymization on Speech Diagnostic Applications: a Case Study on COVID-19 Detectioncited by 1
- 2023Vocoder drift compensation by x-vector alignment in speaker anonymisationcited by 1
- 2024Takin-VC: Expressive Zero-Shot Voice Conversion via Adaptive Hybrid Content Encoding and Enhanced Timbre Modelingcited by 1
- 2025SEF-MK: Speaker-Embedding-Free Voice Anonymization through Multi-k-means Quantizationcited by 1
- 2025SegReConcat: A Data Augmentation Method for Voice Anonymization Attackcited by 1
- 2023Long-term Conversation Analysis: Exploring Utility and Privacycited by 0
- 2024The First VoicePrivacy Attacker Challenge Evaluation Plancited by 0
- 2025Perceptual implications of automatic anonymization in pathological speechcited by 0
- 2025Less Stress, More Privacy: Stress Detection on Anonymized Speech of Air Traffic Controllerscited by 0
- 2026StreamVoiceAnon+: Emotion-Preserving Streaming Speaker Anonymization via Frame-Level Acoustic Distillationcited by 0
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speechcited by 0
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Trainingcited by 0
- 2026Voice Privacy from an Attribute-based Perspectivecited by 0
- 2026Anonymization, Not Elimination: Utility-Preserved Speech Anonymizationcited by 0
- 2026DiffAnon: Diffusion-based Prosody Control for Voice Anonymizationcited by 0
- 2026GroupAffect-4: A Multimodal Dataset of Four-Person Collaborative Interactioncited by 0
- 2026Listen to the Features: Voice Anonymization Driven by Content Embedding Matching over Signal Reconstructioncited by 0
- 2026Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Modelscited by 0
- 2026Beyond EER: Multi-Dimensional Evaluation of Information Leakage in Speaker De-Identificationcited by 0
- 2026A Comprehensive Study of Content Representations for Speech Synthesiscited by 0
- 2026A Comprehensive Study of Content Representations for Speech Synthesis25 Sep 2026
- 2026Beyond EER: Multi-Dimensional Evaluation of Information Leakage in Speaker De-Identification16 Sep 2026
- 2026Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Models1 Sep 2026
- 2026Listen to the Features: Voice Anonymization Driven by Content Embedding Matching over Signal Reconstruction7 Jul 2026
- 2026GroupAffect-4: A Multimodal Dataset of Four-Person Collaborative Interaction19 May 2026
- 2026DiffAnon: Diffusion-based Prosody Control for Voice Anonymization29 Apr 2026
- 2026Anonymization, Not Elimination: Utility-Preserved Speech Anonymization18 Apr 2026
- 2026Voice Privacy from an Attribute-based Perspective19 Mar 2026
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Training13 Mar 2026
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speech8 Mar 2026
- 2026StreamVoiceAnon+: Emotion-Preserving Streaming Speaker Anonymization via Frame-Level Acoustic Distillation6 Mar 2026
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymization17 Jan 2026
33 more
- 2025SegReConcat: A Data Augmentation Method for Voice Anonymization Attack26 Aug 2025
- 2025SEF-MK: Speaker-Embedding-Free Voice Anonymization through Multi-k-means Quantization9 Aug 2025
- 2025Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speech27 Jul 2025
- 2025Less Stress, More Privacy: Stress Detection on Anonymized Speech of Air Traffic Controllers10 Jul 2025
- 2025Perceptual implications of automatic anonymization in pathological speech1 May 2025
- 2025The First VoicePrivacy Attacker Challenge19 Apr 2025
- 2024Analysis of Speech Temporal Dynamics in the Context of Speaker Verification and Voice Anonymization22 Dec 2024
- 2024The First VoicePrivacy Attacker Challenge Evaluation Plan9 Oct 2024
- 2024Takin-VC: Expressive Zero-Shot Voice Conversion via Adaptive Hybrid Content Encoding and Enhanced Timbre Modeling2 Oct 2024
- 2024Differential privacy enables fair and accurate AI-based analysis of speech disorders while protecting patient data27 Sep 2024
- 2024A Benchmark for Multi-speaker Anonymization8 Jul 2024
- 2024Probing the Feasibility of Multilingual Speaker Anonymization3 Jul 2024
- 2024The Impact of Speech Anonymization on Pathology and Its Limits11 Apr 2024
- 2024The VoicePrivacy 2024 Challenge Evaluation Plan3 Apr 2024
- 2024Exploratory Evaluation of Speech Content Masking8 Jan 2024
- 2023Vocoder drift compensation by x-vector alignment in speaker anonymisation17 Jul 2023
- 2023Long-term Conversation Analysis: Exploring Utility and Privacy28 Jun 2023
- 2023Federated learning for secure development of AI models for Parkinson's disease detection using speech from different languages18 May 2023
- 2023On the Impact of Voice Anonymization on Speech Diagnostic Applications: a Case Study on COVID-19 Detection5 Apr 2023
- 2023Federated Learning for ASR based on Wav2vec 2.020 Feb 2023
- 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness18 Dec 2022
- 2022Fantomas: Understanding Face Anonymization Reversibility19 Oct 2022
- 2022An Experimental Study on Private Aggregation of Teacher Ensemble Learning for End-to-End Speech Recognition11 Oct 2022
- 2022DeID-VC: Speaker De-identification via Zero-shot Pseudo Voice Conversion9 Sep 2022
- 2022OOD-Probe: A Neural Interpretation of Out-of-Domain Generalization25 Aug 2022
- 2022Sotto Voce: Federated Speech Recognition with Differential Privacy Guarantees16 Jul 2022
- 2022Speaker Anonymization with Phonetic Intermediate Representations11 Jul 2022
- 2022Exact Prosody Cloning in Zero-Shot Multispeaker Text-to-Speech24 Jun 2022
- 2022The effect of speech pathology on automatic speaker verification -- a large-scale study13 Apr 2022
- 2022Self-Supervised Speech Representations Preserve Speech Characteristics while Anonymizing Voices4 Apr 2022
- 2022The VoicePrivacy 2022 Challenge Evaluation Plan23 Mar 2022
- 2022Differentially Private Speaker Anonymization23 Feb 2022
- 2021Privacy attacks for automatic speech recognition acoustic models in a federated learning framework6 Nov 2021
- 2024The VoicePrivacy 2024 Challenge Evaluation Plancited by 39
- 2022The VoicePrivacy 2022 Challenge Evaluation Plancited by 18
- 2022Differentially Private Speaker Anonymizationcited by 16
- 2022Exact Prosody Cloning in Zero-Shot Multispeaker Text-to-Speechcited by 13
- 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairnesscited by 13
- 2024The Impact of Speech Anonymization on Pathology and Its Limitscited by 11
- 2021Privacy attacks for automatic speech recognition acoustic models in a federated learning frameworkcited by 10
- 2022Speaker Anonymization with Phonetic Intermediate Representationscited by 9
- 2023Federated learning for secure development of AI models for Parkinson's disease detection using speech from different languagescited by 9
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymizationcited by 8
- 2023Federated Learning for ASR based on Wav2vec 2.0cited by 7
- 2024A Benchmark for Multi-speaker Anonymizationcited by 7
12 most cited of 43 All 43 (JSON)
- 2026A Comprehensive Study of Content Representations for Speech Synthesis25 Sep 2026
- 2026Beyond EER: Multi-Dimensional Evaluation of Information Leakage in Speaker De-Identification16 Sep 2026
- 2026Listen to the Features: Voice Anonymization Driven by Content Embedding Matching over Signal Reconstruction7 Jul 2026
- 2026GroupAffect-4: A Multimodal Dataset of Four-Person Collaborative Interaction19 May 2026
- 2026DiffAnon: Diffusion-based Prosody Control for Voice Anonymization29 Apr 2026
- 2026Anonymization, Not Elimination: Utility-Preserved Speech Anonymization18 Apr 2026
- 2026Voice Privacy from an Attribute-based Perspective19 Mar 2026
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Training13 Mar 2026
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speech8 Mar 2026
- 2026StreamVoiceAnon+: Emotion-Preserving Streaming Speaker Anonymization via Frame-Level Acoustic Distillation6 Mar 2026
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymization17 Jan 2026
- 2025SegReConcat: A Data Augmentation Method for Voice Anonymization Attack26 Aug 2025
12 newest of 43 All 43 (JSON)