PrivFair: a Library for Privacy-Preserving Fairness Auditing
Not on the map. Why?
Abstract (arXiv)
Machine learning (ML) has become prominent in applications that directly affect people's quality of life, including in healthcare, justice, and finance. ML models have been found to exhibit discrimination based on sensitive attributes such as gender, race, or disability. Assessing if an ML model is free of bias remains challenging to date, and by definition has to be done with sensitive user characteristics that are subject of anti-discrimination and data protection law. Existing libraries for fairness auditing of ML models offer no mechanism to protect the privacy of the audit data. We present PrivFair, a library for privacy-preserving fairness audits of ML models. Through the use of Secure Multiparty Computation (MPC), PrivFair protects the confidentiality of the model under audit and the sensitive data used for the audit, hence it supports scenarios in which a proprietary classifier owned by a company is audited using sensitive audit data from an external investigator. We demonstrate the use of PrivFair for group fairness auditing with tabular data or image data, without requiring the investigator to disclose their data to anyone in an unencrypted manner, or the model owner to reveal their model parameters to anyone in plaintext.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 15 of its 41 references that are in the map. First posted on arXiv 8 Feb 2022.
Builds on
15 of 41 references.
References · 15
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2016Inherent Trade-Offs in the Fair Determination of Risk Scorescited by 582
- 2017On Fairness and Calibrationcited by 406
- 2017Algorithmic decision making and the cost of fairnesscited by 402
- 2017Preventing Fairness Gerrymandering: Auditing and Learning for Subgroup Fairnesscited by 381
- 2017Fairness in Criminal Justice Risk Assessments: The State of the Artcited by 315
- 2017Fairness Testing: Testing Software for Discriminationcited by 123
- 2018Blind Justice: Fairness with Encrypted Sensitive Attributescited by 41
- 2019QUOTIENT: Two-Party Secure Neural Network Training and Predictioncited by 41
- 2019Secure Evaluation of Quantized Neural Networkscited by 22
- 2020Fairness in the Eyes of the Data: Certifying Machine-Learning Modelscited by 16
3 more
- 2021Privacy-Preserving Video Classification with Convolutional Neural Networkscited by 10
- 2020High Performance Logistic Regression for Privacy-Preserving Genome Analysiscited by 9
- 2019Privacy-Preserving Classification of Personal Text Messages with Secure Multi-Party Computation: An Application to Hate-Speech Detectioncited by 5
Built on by
Citing papers per year: 2023: 1; 2024: 1; 2025: 1; 2026: 1.
4 papers.
- 2026Manipulation-Proof Oblivious Audits against Deceptive Model Providers5 Aug 2026
- 2025P2NIA: Privacy-Preserving Non-Iterative Auditing1 Apr 2025
- 2024Secure and Confidential Certificates of Online Fairness17 Sep 2024
- 2023Holistic Survey of Privacy and Fairness in Machine Learning28 Jul 2023