How to keep text private? A systematic review of deep learning methods for privacy-preserving natural language processing
Not on the map. Why?
Abstract (arXiv)
Deep learning (DL) models for natural language processing (NLP) tasks often handle private data, demanding protection against breaches and disclosures. Data protection laws, such as the European Union's General Data Protection Regulation (GDPR), thereby enforce the need for privacy. Although many privacy-preserving NLP methods have been proposed in recent years, no categories to organize them have been introduced yet, making it hard to follow the progress of the literature. To close this gap, this article systematically reviews over sixty DL methods for privacy-preserving NLP published between 2016 and 2020, covering theoretical foundations, privacy-enhancing technologies, and analysis of their suitability for real-world scenarios. First, we introduce a novel taxonomy for classifying the existing methods into three categories: data safeguarding methods, trusted methods, and verification methods. Second, we present an extensive summary of privacy threats, datasets for applications, and metrics for privacy evaluation. Third, throughout the review, we describe privacy issues in the NLP pipeline in a holistic view. Further, we discuss open challenges in privacy-preserving NLP regarding data traceability, computation overhead, dataset size, the prevalence of human biases in embeddings, and the privacy-utility tradeoff. Finally, this review presents future research directions to guide successive research and development of privacy-preserving NLP models.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Builds on 63 of its 174 references that are in the map. First posted on arXiv 20 May 2022.
Builds on
63 of 174 references.
References · 63
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2013Distributed Representations of Words and Phrases and their Compositionalitycited by 3,462
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
- 2016Deep Learning with Differential Privacycited by 2,682
- 2018Deep contextualized word representationscited by 2,285
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,461
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2014Convolutional Neural Networks for Sentence Classificationcited by 1,124
- 2016ConceptNet 5.5: An Open Multilingual Graph of General Knowledgecited by 1,065
38 more
- 2016Semantics derived automatically from language corpora contain human-like biasescited by 894
- 2016Bag of Tricks for Efficient Text Classificationcited by 869
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2014Distributed Representations of Sentences and Documentscited by 677
- 2017Exploring Generalization in Deep Learningcited by 595
- 2018Federated Learning for Mobile Keyboard Predictioncited by 565
- 2019On Measuring Social Biases in Sentence Encoderscited by 397
- 2019Mitigating Gender Bias in Natural Language Processing: Literature Reviewcited by 287
- 2013Direct and Indirect Effectscited by 276
- 2019Lipstick on a Pig: Debiasing Methods Cover up Systematic Gender Biases in Word Embeddings But do not Remove Themcited by 268
- 2015Semi-Supervised Learning with Ladder Networkscited by 246
- 2020Information Leakage in Embedding Modelscited by 199
- 2020Causal Mediation Analysis for Interpreting Neural NLP: The Case of Gender Biascited by 183
- 2020Social Biases in NLP Models as Barriers for Persons with Disabilitiescited by 182
- 2018Learning Gender-Neutral Word Embeddingscited by 169
- 2018Adversarial Removal of Demographic Attributes from Text Datacited by 166
- 2017A Survey on Homomorphic Encryption Schemes: Theory and Implementationcited by 154
- 2019Assessing Social and Intersectional Biases in Contextualized Word Representationscited by 134
- 2018Disentangled Representation Learning for Non-Parallel Text Style Transfercited by 127
- 2019Privacy- and Utility-Preserving Textual Analysis via Calibrated Multivariate Perturbationscited by 115
- 2016De-identification of Patient Notes with Recurrent Neural Networkscited by 88
- 2016Disentangling factors of variation in deep representations using adversarial trainingcited by 87
- 2018Tensor2Tensor for Neural Machine Translationcited by 85
- 2014Automated Experiments on Ad Privacy Settings: A Tale of Opacity, Choice, and Discriminationcited by 83
- 2018Towards Robust and Privacy-preserving Text Representationscited by 75
- 2017Racial Disparity in Natural Language Processing: A Case Study of Social Media African-American Englishcited by 69
- 2020Differentially Private Representation for NLP: Formal Guarantee and An Empirical Study on Privacy and Fairnesscited by 66
- 2019Equalizing Gender Biases in Neural Machine Translation with Word Embeddings Techniquescited by 65
- 2019Gender-preserving Debiasing for Pre-trained Word Embeddingscited by 61
- 2016Simple and Accurate Dependency Parsing Using Bidirectional LSTM Feature Representationscited by 55
- 2020Gender Bias in Multilingual Embeddings and Cross-Lingual Transfercited by 55
- 2018Privacy-preserving Neural Representations of Textcited by 54
- 2018Generalised Differential Privacy for Text Document Processingcited by 52
- 2018From Word to Sense Embeddings: A Survey on Vector Representations of Meaningcited by 49
- 2019Leveraging Hierarchical Representations for Preserving Privacy and Utility in Textcited by 49
- 2019Federated Learning of N-gram Language Modelscited by 33
- 2020TextHide: Tackling Data Privacy in Language Understanding Taskscited by 32
- 2019Fair is Better than Sensational:Man is to Doctor as Woman is to Doctorcited by 27
50 most cited of 63 All 63 (JSON)
Built on by
Citing papers per year: 2023: 6; 2024: 3; 2025: 4; 2026: 3.
16 papers.
Sort:
By area:
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitizationcited by 17
- 2023Enhancing Small Medical Learners with Privacy-preserving Contextual Promptingcited by 11
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Datacited by 10
- 2023ChatGPT is on the Horizon: Could a Large Language Model be Suitable for Intelligent Traffic Safety Research and Applications?cited by 9
- 2023Recovering from Privacy-Preserving Masking with Large Language Modelscited by 9
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applicationscited by 8
- 2024A Catalog of Fairness-Aware Practices in Machine Learning Engineeringcited by 4
- 2025Enterprise AI Must Enforce Participant-Aware Access Controlcited by 3
- 2025Learning Obfuscations Of LLM Embedding Sequences: Stained Glass Transformcited by 2
- 2026Concept-Aware Privacy Mechanisms for Defending Embedding Inversion Attackscited by 2
- 2023Synthetic Text Generation using Hypergraph Representationscited by 1
4 more
- 2026Towards Privacy-Preserving Machine Translation at the Inference Stage: A New Task and Benchmarkcited by 1
- 2024Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimizationcited by 0
- 2025Semimage: HSV-Based Semantic Image Encoding for Disentangled Text Representationcited by 0
- 2026Say Something Else: Rethinking Contextual Privacy as Information Sufficiencycited by 0
- 2026Say Something Else: Rethinking Contextual Privacy as Information Sufficiency7 Apr 2026
- 2026Towards Privacy-Preserving Machine Translation at the Inference Stage: A New Task and Benchmark16 Mar 2026
- 2026Concept-Aware Privacy Mechanisms for Defending Embedding Inversion Attacks6 Feb 2026
- 2025Semimage: HSV-Based Semantic Image Encoding for Disentangled Text Representation26 Nov 2025
- 2025Enterprise AI Must Enforce Participant-Aware Access Control18 Sep 2025
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data16 Aug 2025
- 2025Learning Obfuscations Of LLM Embedding Sequences: Stained Glass Transform11 Jun 2025
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applications11 Oct 2024
- 2024A Catalog of Fairness-Aware Practices in Machine Learning Engineering29 Aug 2024
- 2024Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization21 Jul 2024
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2023Recovering from Privacy-Preserving Masking with Large Language Models12 Sep 2023
4 more
- 2023Synthetic Text Generation using Hypergraph Representations6 Sep 2023
- 2023Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitization24 May 2023
- 2023Enhancing Small Medical Learners with Privacy-preserving Contextual Prompting22 May 2023
- 2023ChatGPT is on the Horizon: Could a Large Language Model be Suitable for Intelligent Traffic Safety Research and Applications?6 Mar 2023
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2023Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitizationcited by 17
- 2023Enhancing Small Medical Learners with Privacy-preserving Contextual Promptingcited by 11
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Datacited by 10
- 2023ChatGPT is on the Horizon: Could a Large Language Model be Suitable for Intelligent Traffic Safety Research and Applications?cited by 9
- 2023Recovering from Privacy-Preserving Masking with Large Language Modelscited by 9
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applicationscited by 8
- 2024A Catalog of Fairness-Aware Practices in Machine Learning Engineeringcited by 4
- 2025Enterprise AI Must Enforce Participant-Aware Access Controlcited by 3
- 2025Learning Obfuscations Of LLM Embedding Sequences: Stained Glass Transformcited by 2
- 2026Concept-Aware Privacy Mechanisms for Defending Embedding Inversion Attackscited by 2
- 2023Synthetic Text Generation using Hypergraph Representationscited by 1
- 2026Towards Privacy-Preserving Machine Translation at the Inference Stage: A New Task and Benchmarkcited by 1
12 most cited of 15 All 15 (JSON)
- 2026Say Something Else: Rethinking Contextual Privacy as Information Sufficiency7 Apr 2026
- 2026Towards Privacy-Preserving Machine Translation at the Inference Stage: A New Task and Benchmark16 Mar 2026
- 2026Concept-Aware Privacy Mechanisms for Defending Embedding Inversion Attacks6 Feb 2026
- 2025Semimage: HSV-Based Semantic Image Encoding for Disentangled Text Representation26 Nov 2025
- 2025Enterprise AI Must Enforce Participant-Aware Access Control18 Sep 2025
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data16 Aug 2025
- 2025Learning Obfuscations Of LLM Embedding Sequences: Stained Glass Transform11 Jun 2025
- 2024Balancing Innovation and Privacy: Data Security Strategies in Natural Language Processing Applications11 Oct 2024
- 2024A Catalog of Fairness-Aware Practices in Machine Learning Engineering29 Aug 2024
- 2024Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization21 Jul 2024
- 2023Recovering from Privacy-Preserving Masking with Large Language Models12 Sep 2023
- 2023Synthetic Text Generation using Hypergraph Representations6 Sep 2023
12 newest of 15 All 15 (JSON)