On the Alignment of Group Fairness with Attribute Privacy
Not on the map. Why?
Abstract (arXiv)
Group fairness and privacy are fundamental aspects in designing trustworthy machine learning models. Previous research has highlighted conflicts between group fairness and different privacy notions. We are the first to demonstrate the alignment of group fairness with the specific privacy notion of attribute privacy in a blackbox setting. Attribute privacy, quantified by the resistance to attribute inference attacks (AIAs), requires indistinguishability in the target model's output predictions. Group fairness guarantees this thereby mitigating AIAs and achieving attribute privacy. To demonstrate this, we first introduce AdaptAIA, an enhancement of existing AIAs, tailored for real-world datasets with class imbalances in sensitive attributes. Through theoretical and extensive empirical analyses, we demonstrate the efficacy of two standard group fairness algorithms (i.e., adversarial debiasing and exponentiated gradient descent) against AdaptAIA. Additionally, since using group fairness results in attribute privacy, it acts as a defense against AIAs, which is currently lacking. Overall, we show that group fairness aligns with attribute privacy at no additional cost other than the already existing trade-off with model utility.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 23 of its 54 references that are in the map. First posted on arXiv 18 Nov 2022.
Builds on
23 of 54 references.
References · 23
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2018Mitigating Unwanted Biases with Adversarial Learningcited by 663
- 2018A Reductions Approach to Fair Classificationcited by 587
- 2018Learning Adversarially Fair and Transferable Representationscited by 353
- 2019Differential Privacy Has Disparate Impact on Model Accuracycited by 316
- 2015Censoring Representations with an Adversarycited by 192
- 2017Controllable Invariance through Adversarial Feature Learningcited by 127
- 2020On the Privacy Risks of Algorithmic Fairnesscited by 82
- 2019Overlearning Reveals Sensitive Attributescited by 76
- 2018AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learningcited by 60
- 2016Learning to Pivot with Adversarial Networkscited by 55
- 2022Are Attribute Inference Attacks Just Imputation?cited by 49
11 more
- 2022Differential Privacy and Fairness in Decisions and Learning Tasks: A Surveycited by 47
- 2020Empirical observation of negligible fairness-accuracy trade-offs in machine learning for public policycited by 44
- 2020An Overview of Privacy in Machine Learningcited by 39
- 2016You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviorscited by 34
- 2021On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Modelscited by 31
- 2022Understanding Why Generalized Reweighting Does Not Improve Over ERMcited by 29
- 2021Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputscited by 18
- 2022Inferring Sensitive Attributes from Model Explanationscited by 15
- 2021A Fairness Analysis on Private Aggregation of Teacher Ensemblescited by 11
- 2022Exploiting Fairness to Enhance Sensitive Attributes Reconstructioncited by 10
- 2021Does deep learning model calibration improve performance in class-imbalanced medical image classification?cited by 9
Built on by
Citing papers per year: 2023: 1; 2024: 1; 2025: 4; 2026: 3.
9 papers.
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyondcited by 6
- 2023Holistic Survey of Privacy and Fairness in Machine Learningcited by 4
- 2024Combining Machine Learning Defenses without Conflictscited by 2
- 2025Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifierscited by 2
- 2025Amulet: a Python Library for Assessing Interactions Among ML Defenses and Riskscited by 1
- 2026Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Datacited by 1
- 2025Beyond Frequency: The Role of Redundancy in Large Language Model Memorizationcited by 0
- 2026Taipan: A Query-free Transfer-based Multiple Sensitive Attribute Inference Attack Solely from Auxiliary Graphscited by 0
- 2026SoK: Colluding Adversaries in Machine Learning Pipelinescited by 0
- 2026Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Data8 Jul 2026
- 2026SoK: Colluding Adversaries in Machine Learning Pipelines8 Jun 2026
- 2026Taipan: A Query-free Transfer-based Multiple Sensitive Attribute Inference Attack Solely from Auxiliary Graphs6 Feb 2026
- 2025Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks15 Sep 2025
- 2025Beyond Frequency: The Role of Redundancy in Large Language Model Memorization14 Jun 2025
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond10 Mar 2025
- 2025Do Fairness Interventions Come at the Cost of Privacy: Evaluations for Binary Classifiers8 Mar 2025
- 2024Combining Machine Learning Defenses without Conflicts14 Nov 2024
- 2023Holistic Survey of Privacy and Fairness in Machine Learning28 Jul 2023