An Empirical Analysis of Fairness Notions under Differential Privacy
Not on the map. Why?
Abstract (arXiv)
Recent works have shown that selecting an optimal model architecture suited to the differential privacy setting is necessary to achieve the best possible utility for a given privacy budget using differentially private stochastic gradient descent (DP-SGD)(Tramer and Boneh 2020; Cheng et al. 2022). In light of these findings, we empirically analyse how different fairness notions, belonging to distinct classes of statistical fairness criteria (independence, separation and sufficiency), are impacted when one selects a model architecture suitable for DP-SGD, optimized for utility. Using standard datasets from ML fairness literature, we show using a rigorous experimental protocol, that by selecting the optimal model architecture for DP-SGD, the differences across groups concerning the relevant fairness metrics (demographic parity, equalized odds and predictive parity) more often decrease or are negligibly impacted, compared to the non-private baseline, for which optimal model architecture has also been selected to maximize utility. These findings challenge the understanding that differential privacy will necessarily exacerbate unfairness in deep learning models trained on biased datasets.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 31 of its 47 references that are in the map. First posted on arXiv 6 Feb 2023.
Builds on
31 of 47 references.
References · 31
- 2016Deep Learning with Differential Privacycited by 2,728
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2016Equality of Opportunity in Supervised Learningcited by 2,007
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2014Certifying and removing disparate impactcited by 715
- 2016Fair prediction with disparate impact: A study of bias in recidivism prediction instrumentscited by 672
- 2017Renyi Differential Privacycited by 650
- 2021Retiring Adult: New Datasets for Fair Machine Learningcited by 449
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
- 2016Fairness Beyond Disparate Treatment & Disparate Impact: Learning Classification without Disparate Mistreatmentcited by 369
- 2019Differential Privacy Has Disparate Impact on Model Accuracycited by 316
- 2018Scalable Private Learning with PATEcited by 269
19 more
- 2020Fairness without Demographics through Adversarially Reweighted Learningcited by 251
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 235
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 224
- 2018The Frontiers of Fairness in Machine Learningcited by 141
- 2019Reconstruction and Membership Inference Attacks against Generative Modelscited by 122
- 2021FairFed: Enabling Group Fairness in Federated Learningcited by 118
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021A Clarification of the Nuances in the Fairness Metrics Landscapecited by 98
- 2022Toward Training at ImageNet Scale with Differential Privacycited by 87
- 2020On the Privacy Risks of Algorithmic Fairnesscited by 82
- 2018Differentially Private Fair Learningcited by 76
- 2022Towards Intersectionality in Machine Learning: Including More Identities, Handling Underrepresentation, and Performing Evaluationcited by 59
- 2019Fair Decision Making using Privacy-Protected Datacited by 58
- 2021Robin Hood and Matthew Effects: Differential Privacy Has Disparate Impact on Synthetic Datacited by 48
- 2021DPNAS: Neural Architecture Search for Deep Learning with Differential Privacycited by 20
- 2020Machine learning fairness notions: Bridging the gap with real-world applicationscited by 19
- 2020Removing Disparate Impact of Differentially Private Stochastic Gradient Descent on Model Accuracycited by 13
- 2021A Fairness Analysis on Private Aggregation of Teacher Ensemblescited by 11
- 2022Exploring the Unfairness of DP-SGD Across Settingscited by 3
Built on by
Citing papers per year: 2023: 4; 2024: 1; 2025: 3; 2026: 1.
9 papers.
- 2023Bias Testing and Mitigation in LLM-based Code Generationcited by 53
- 2023Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Surveycited by 12
- 2023(Local) Differential Privacy has NO Disparate Impact on Fairnesscited by 5
- 2023On the Impact of Multi-dimensional Local Differential Privacy on Fairnesscited by 4
- 2025SoK: What Makes Private Learning Unfair?cited by 3
- 2024MAPPING: Debiasing Graph Neural Networks for Fair Node Classification with Limited Sensitive Information Leakagecited by 2
- 2025Private and Fair Machine Learning: Revisiting the Disparate Impact of Differentially Private SGDcited by 1
- 2025Fair Play for Individuals, Foul Play for Groups? Auditing Anonymization's Impact on ML Fairnesscited by 0
- 2026The Privacy-Hallucination Tradeoff in Differentially Private Language Modelscited by 0
- 2026The Privacy-Hallucination Tradeoff in Differentially Private Language Models31 Aug 2026
- 2025Private and Fair Machine Learning: Revisiting the Disparate Impact of Differentially Private SGD2 Oct 2025
- 2025Fair Play for Individuals, Foul Play for Groups? Auditing Anonymization's Impact on ML Fairness12 May 2025
- 2025SoK: What Makes Private Learning Unfair?24 Jan 2025
- 2024MAPPING: Debiasing Graph Neural Networks for Fair Node Classification with Limited Sensitive Information Leakage23 Jan 2024
- 2023On the Impact of Multi-dimensional Local Differential Privacy on Fairness7 Dec 2023
- 2023Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey28 Sep 2023
- 2023Bias Testing and Mitigation in LLM-based Code Generation3 Sep 2023
- 2023(Local) Differential Privacy has NO Disparate Impact on Fairness25 Apr 2023