Differentially Private Federated Learning on Heterogeneous Data
Not on the map. Why?
Abstract (arXiv)
Federated Learning (FL) is a paradigm for large-scale distributed learning which faces two key challenges: (i) efficient training from highly heterogeneous user data, and (ii) protecting the privacy of participating users. In this work, we propose a novel FL approach (DP-SCAFFOLD) to tackle these two challenges together by incorporating Differential Privacy (DP) constraints into the popular SCAFFOLD algorithm. We focus on the challenging setting where users communicate with a "honest-but-curious" server without any trusted intermediary, which requires to ensure privacy not only towards a third-party with access to the final model but also towards the server who observes all user communications. Using advanced results from DP theory, we establish the convergence of our algorithm for convex and non-convex objectives. Our analysis clearly highlights the privacy-utility trade-off under data heterogeneity, and demonstrates the superiority of DP-SCAFFOLD over the state-of-the-art algorithm DP-FedAvg when the number of local updates and the level of heterogeneity grow. Our numerical results confirm our analysis and show that DP-SCAFFOLD provides significant gains in practice.
Key facts. Cited by 74 papers in the map (data through 14 Oct 2026). Builds on 30 of its 53 references that are in the map. First posted on arXiv 17 Nov 2021.
Builds on
30 of 53 references.
References · 30
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,669
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2018Federated Optimization in Heterogeneous Networkscited by 2,987
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Adaptive Federated Optimizationcited by 1,046
- 2019Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classificationcited by 851
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 712
- 2017Renyi Differential Privacycited by 650
- 2021Federated Learning Based on Dynamic Regularizationcited by 562
- 2019Federated Learning with Differential Privacy: Algorithms and Performance Analysiscited by 536
18 more
- 2017Differentially Private Federated Learning: A Client Level Perspectivecited by 459
- 2021A Field Guide to Federated Optimizationcited by 315
- 2013The Composition Theorem for Differential Privacycited by 297
- 2019Tighter Theory for Local SGD on Identical and Heterogeneous Datacited by 266
- 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 236
- 2019Differentially Private Learning with Adaptive Clippingcited by 220
- 2019SGD: General Analysis and Improved Ratescited by 207
- 2021Federated Multi-Task Learning under a Mixture of Distributionscited by 192
- 2018Amplification by Shuffling: From Local to Central Differential Privacy via Anonymitycited by 164
- 2020Mime: Mimicking Centralized Stochastic Algorithms in Federated Learningcited by 154
- 2018Distributed Differential Privacy via Shufflingcited by 115
- 2016Minimax Optimal Procedures for Locally Private Estimationcited by 107
- 2020Local Differential Privacy based Federated Learning for Internet of Thingscited by 75
- 2019The Privacy Blanket of the Shuffle Modelcited by 74
- 2019Federated Learning with Bayesian Differential Privacycited by 60
- 2017Personalized and Private Peer-to-Peer Machine Learningcited by 54
- 2019Scalable and Differentially Private Distributed Aggregation in the Shuffled Modelcited by 20
- 2021Renyi Differential Privacy of the Subsampled Shuffle Model in Distributed Learningcited by 6
Built on by
Citing papers per year: 2022: 7; 2023: 19; 2024: 23; 2025: 16; 2026: 9.
74 papers.
Sort:
By area:
- 2022Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Modelscited by 53
- 2023Conformal Prediction for Federated Uncertainty Quantification Under Label Shiftcited by 29
- 2023One-Shot Federated Conformal Predictioncited by 27
- 2022Private Non-Convex Federated Learning Without a Trusted Servercited by 26
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 26
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2022Personalization Improves Privacy-Accuracy Tradeoffs in Federated Learningcited by 23
- 2024The Privacy Power of Correlated Noise in Decentralized Learningcited by 18
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noisecited by 13
- 2024Revisiting Ensembling in One-Shot Federated Learningcited by 13
- 2024Non-IID data in Federated Learning: A Survey with Taxonomy, Metrics, Methods, Frameworks and Future Directionscited by 13
- 2022Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attackscited by 12
38 more
- 2024Advances in Robust Federated Learning: A Survey with Heterogeneity Considerationscited by 12
- 2023Compression with Exact Error Distribution for Federated Learningcited by 11
- 2023DIFF2: Differential Private Optimization via Gradient Differences for Nonconvex Distributed Learningcited by 10
- 2023Convergence and Privacy of Decentralized Nonconvex Optimization with Gradient Clipping and Communication Compressioncited by 9
- 2024Cross-silo Federated Learning with Record-level Personalized Differential Privacycited by 9
- 2024DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptationcited by 9
- 2024Noise-Aware Algorithm for Heterogeneous Differentially Private Federated Learningcited by 9
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Lossescited by 8
- 2025Towards Trustworthy Federated Learning with Untrusted Participantscited by 8
- 2023Composite federated learning with heterogeneous datacited by 7
- 2023Theoretically Principled Federated Learning for Balancing Privacy and Utilitycited by 6
- 2023Mean Estimation Under Heterogeneous Privacy Demandscited by 6
- 2024The Effect of Quantization in Federated Learning: A R'enyi Differential Privacy Perspectivecited by 6
- 2023FedLAP-DP: Federated Learning by Sharing Differentially Private Loss Approximationscited by 5
- 2023From Noisy Fixed-Point Iterations to Private ADMM for Centralized and Federated Learningcited by 5
- 2023Dynamic Privacy Allocation for Locally Differentially Private Federated Learning with Composite Objectivescited by 5
- 2024FedSC: Provable Federated Self-supervised Learning with Spectral Contrastive Objective over Non-i.i.d. Datacited by 5
- 2024Nonconvex Federated Learning on Compact Smooth Submanifolds With Heterogeneous Datacited by 5
- 2025FedMentor: Domain-Aware Differential Privacy for Heterogeneous Federated LLMs in Mental Healthcited by 5
- 2026Rethinking LoRA for Privacy-Preserving Federated Learning in Large Modelscited by 5
- 2024Differentially Private Clustered Federated Learningcited by 4
- 2024A survey on secure decentralized optimization and learningcited by 4
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservationcited by 4
- 2024Enhancing Privacy in Federated Learning through Local Trainingcited by 3
- 2024FedSheafHN: Personalized Federated Learning on Graph-structured Datacited by 3
- 2024Private and Federated Stochastic Convex Optimization: Efficient Strategies for Centralized Systemscited by 3
- 2025Smoothed Normalization for Efficient Distributed Private Optimizationcited by 3
- 2023Privacy Preserving Bayesian Federated Learning in Heterogeneous Settingscited by 2
- 2023Privacy-preserving Federated Primal-dual Learning for Non-convex and Non-smooth Problems with Model Sparsificationcited by 2
- 2024The Power of Bias: Optimizing Client Selection in Federated Learning with Heterogeneous Differential Privacycited by 2
- 2025Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrixcited by 2
- 2023Balancing Privacy and Performance for Private Federated Learning Algorithmscited by 1
- 2023ALI-DPFL: Differentially Private Federated Learning with Adaptive Local Iterationscited by 1
- 2024On Using Secure Aggregation in Differentially Private Federated Learning with Multiple Local Stepscited by 1
- 2025Evaluating Membership Inference Attacks in heterogeneous-data setupscited by 1
- 2025Approximate Agreement Algorithms for Byzantine Collaborative Learningcited by 1
- 2025Accelerating Differentially Private Federated Learning via Adaptive Extrapolationcited by 1
- 2025Federated Instrumental Variable Analysis via Federated Generalized Method of Momentscited by 1
50 most cited of 74 All 74 (JSON)
- 2026Unveiling the Non-Monotonic Effect of Privacy on Generalization under Byzantine Robustness1 Jul 2026
- 2026Position: Life-Logging Video Streams Make the Privacy-Utility Trade-off Inevitable11 May 2026
- 2026Differentially Private Clustered Federated Learning with Privacy-Preserving Initialization and Normality-Driven Aggregation22 Apr 2026
- 2026Byzantine-Robust Distributed SGD: A Unified Analysis and Tight Error Bounds11 Apr 2026
- 2026Scalable and Private Federated Learning Using Distributed Differential Privacy and Secure Aggregation8 Apr 2026
- 2026Communication-Efficient Distributed Learning with Differential Privacy2 Apr 2026
- 2026DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large Models23 Feb 2026
- 2026Rethinking LoRA for Privacy-Preserving Federated Learning in Large Models23 Feb 2026
- 2026DP-FedSOFIM: Differentially Private Federated Stochastic Optimization using Regularized Fisher Information Matrix14 Jan 2026
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptions25 Dec 2025
- 2025pFedBBN: A Personalized Federated Test-Time Adaptation with Balanced Batch Normalization for Class-Imbalanced Data22 Nov 2025
- 2025Differential Privacy for Euclidean Jordan Algebra with Applications to Private Symmetric Cone Programming21 Sep 2025
38 more
- 2025FedMentor: Domain-Aware Differential Privacy for Heterogeneous Federated LLMs in Mental Health16 Sep 2025
- 2025Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing10 Sep 2025
- 2025From Privacy to Trust in the Agentic Era: A Taxonomy of Challenges in Trustworthy Federated Learning Through the Lens of Trust Report 2.021 Jul 2025
- 2025Differentially Private Federated Low Rank Adaptation Beyond Fixed-Matrix14 Jul 2025
- 2025Client Clustering Meets Knowledge Sharing: Enhancing Privacy and Robustness in Personalized Peer-to-Peer Learning25 Jun 2025
- 2025Privacy-Preserving Federated Convex Optimization: Balancing Partial-Participation and Efficiency via Noise Cancellation3 Jun 2025
- 2025Federated Instrumental Variable Analysis via Federated Generalized Method of Moments27 May 2025
- 2025Towards Trustworthy Federated Learning with Untrusted Participants3 May 2025
- 2025Accelerating Differentially Private Federated Learning via Adaptive Extrapolation14 Apr 2025
- 2025Approximate Agreement Algorithms for Byzantine Collaborative Learning2 Apr 2025
- 2025Differential Privacy Personalized Federated Learning Based on Dynamically Sparsified Client Updates12 Mar 2025
- 2025Evaluating Membership Inference Attacks in heterogeneous-data setups26 Feb 2025
- 2025Smoothed Normalization for Efficient Distributed Private Optimization19 Feb 2025
- 2024Non-IID data in Federated Learning: A Survey with Taxonomy, Metrics, Methods, Frameworks and Future Directions19 Nov 2024
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservation17 Nov 2024
- 2024Revisiting Ensembling in One-Shot Federated Learning11 Nov 2024
- 2024Convergent Differential Privacy Analysis for General Federated Learning28 Aug 2024
- 2024The Power of Bias: Optimizing Client Selection in Federated Learning with Heterogeneous Differential Privacy16 Aug 2024
- 2024A survey on secure decentralized optimization and learning16 Aug 2024
- 2024On Using Secure Aggregation in Differentially Private Federated Learning with Multiple Local Steps27 Jul 2024
- 2024Private and Federated Stochastic Convex Optimization: Efficient Strategies for Centralized Systems17 Jul 2024
- 2024Private Heterogeneous Federated Learning Without a Trusted Server Revisited: Error-Optimal and Communication-Efficient Algorithms for Convex Losses12 Jul 2024
- 2024Federated Binary Matrix Factorization using Proximal Optimization1 Jul 2024
- 2024Nonconvex Federated Learning on Compact Smooth Submanifolds With Heterogeneous Data12 Jun 2024
- 2024Noise-Aware Algorithm for Heterogeneous Differentially Private Federated Learning5 Jun 2024
- 2024Differentially Private Clustered Federated Learning29 May 2024
- 2024P4: Towards private, personalized, and Peer-to-Peer learning27 May 2024
- 2024FedSheafHN: Personalized Federated Learning on Graph-structured Data25 May 2024
- 2024The Effect of Quantization in Federated Learning: A R'enyi Differential Privacy Perspective16 May 2024
- 2024Advances in Robust Federated Learning: A Survey with Heterogeneity Considerations16 May 2024
- 2024DP-DyLoRA: Fine-Tuning Transformer-Based Models On-Device under Differentially Private Federated Learning using Dynamic Low-Rank Adaptation10 May 2024
- 2024FedSC: Provable Federated Self-supervised Learning with Spectral Contrastive Objective over Non-i.i.d. Data7 May 2024
- 2024Differentially Private Federated Learning without Noise Addition: When is it Possible?6 May 2024
- 2024The Privacy Power of Correlated Noise in Decentralized Learning2 May 2024
- 2024Enhancing Privacy in Federated Learning through Local Training26 Mar 2024
- 2024Cross-silo Federated Learning with Record-level Personalized Differential Privacy29 Jan 2024
- 2023Factor-Assisted Federated Learning for Personalized Optimization with Heterogeneous Data7 Dec 2023
- 2023Compression with Exact Error Distribution for Federated Learning31 Oct 2023
50 newest of 74 All 74 (JSON)
- 2022Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Modelscited by 53
- 2023Conformal Prediction for Federated Uncertainty Quantification Under Label Shiftcited by 29
- 2023One-Shot Federated Conformal Predictioncited by 27
- 2022Private Non-Convex Federated Learning Without a Trusted Servercited by 26
- 2023Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneitycited by 26
- 2023On the Privacy-Robustness-Utility Trilemma in Distributed Learningcited by 24
- 2022Personalization Improves Privacy-Accuracy Tradeoffs in Federated Learningcited by 23
- 2024The Privacy Power of Correlated Noise in Decentralized Learningcited by 18
- 2022Adap DP-FL: Differentially Private Federated Learning with Adaptive Noisecited by 13
- 2024Revisiting Ensembling in One-Shot Federated Learningcited by 13
- 2024Non-IID data in Federated Learning: A Survey with Taxonomy, Metrics, Methods, Frameworks and Future Directionscited by 13
- 2022Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attackscited by 12
12 most cited of 70 All 70 (JSON)
- 2026Unveiling the Non-Monotonic Effect of Privacy on Generalization under Byzantine Robustness1 Jul 2026
- 2026Position: Life-Logging Video Streams Make the Privacy-Utility Trade-off Inevitable11 May 2026
- 2026Differentially Private Clustered Federated Learning with Privacy-Preserving Initialization and Normality-Driven Aggregation22 Apr 2026
- 2026Byzantine-Robust Distributed SGD: A Unified Analysis and Tight Error Bounds11 Apr 2026
- 2026Scalable and Private Federated Learning Using Distributed Differential Privacy and Secure Aggregation8 Apr 2026
- 2026Communication-Efficient Distributed Learning with Differential Privacy2 Apr 2026
- 2026DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large Models23 Feb 2026
- 2026DP-FedSOFIM: Differentially Private Federated Stochastic Optimization using Regularized Fisher Information Matrix14 Jan 2026
- 2025First Provable Guarantees for Practical Private FL: Beyond Restrictive Assumptions25 Dec 2025
- 2025pFedBBN: A Personalized Federated Test-Time Adaptation with Balanced Batch Normalization for Class-Imbalanced Data22 Nov 2025
- 2025Differential Privacy for Euclidean Jordan Algebra with Applications to Private Symmetric Cone Programming21 Sep 2025
- 2025FedMentor: Domain-Aware Differential Privacy for Heterogeneous Federated LLMs in Mental Health16 Sep 2025
12 newest of 70 All 70 (JSON)