Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utility
Not on the map. Why?
Abstract (arXiv)
Generative models trained with Differential Privacy (DP) can produce synthetic data while reducing privacy risks. However, navigating their privacy-utility tradeoffs makes finding the best models for specific settings/tasks challenging. This paper bridges this gap by profiling how DP generative models for tabular data distribute privacy budgets across rows and columns, which is one of the primary sources of utility degradation. We compare graphical and deep generative models, focusing on the key factors contributing to how privacy budgets are spent, i.e., underlying modeling techniques, DP mechanisms, and data dimensionality. Through our measurement study, we shed light on the characteristics that make different models suitable for various settings and tasks. For instance, we find that graphical models distribute privacy budgets horizontally and thus cannot handle relatively wide datasets for a fixed training time; also, the performance on the task they were optimized for monotonically increases with more data but could also overfit. Deep generative models spend their budgets per iteration, so their behavior is less predictable with varying dataset dimensions, but are more flexible as they could perform better if trained on more features. Moreover, low levels of privacy (ε≥100) could help some models generalize, achieving better results than without applying DP. We believe our work will aid the deployment of DP synthetic data techniques by navigating through the best candidate models vis-a-vis the dataset features, desired privacy levels, and downstream tasks.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Builds on 44 of its 106 references that are in the map. First posted on arXiv 18 May 2023.
Builds on
44 of 106 references.
References · 44
- 2016Deep Learning with Differential Privacycited by 2,682
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2018MINE: Mutual Information Neural Estimationcited by 680
- 2019On Variational Bounds of Mutual Informationcited by 550
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
- 2017Real-valued (Medical) Time Series Generation with Recurrent Conditional GANscited by 329
- 2013The Composition Theorem for Differential Privacycited by 290
- 2018Scalable Private Learning with PATEcited by 266
- 2018Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergencescited by 237
- 2018Differentially Private Generative Adversarial Networkcited by 235
32 more
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 233
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2019Reconstruction and Membership Inference Attacks against Generative Modelscited by 122
- 2020Telescoping Density-Ratio Estimationcited by 108
- 2021Winning the NIST Contest: A scalable and general approach to differentially private synthetic datacited by 101
- 2022AIM: An Adaptive and Iterative Mechanism for Differentially Private Synthetic Datacited by 88
- 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 80
- 2023Synthcity: facilitating innovative use cases of synthetic data in different data modalitiescited by 76
- 2019Graphical-model based estimation and inference for differential privacycited by 73
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 58
- 2022TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Datacited by 56
- 2019G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminatorscited by 53
- 2022Mixed Differential Privacy in Computer Visioncited by 53
- 2021Differentially Private Query Release Through Adaptive Projectioncited by 50
- 2021Robin Hood and Matthew Effects: Differential Privacy Has Disparate Impact on Synthetic Datacited by 48
- 2019Detecting Overfitting of Deep Generative Networks via Latent Recoverycited by 44
- 2020New Oracle-Efficient Algorithms for Private Synthetic Data Releasecited by 43
- 2023Bounding Training Data Reconstruction in DP-SGDcited by 42
- 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
- 2019Differentially Private Generative Adversarial Networks for Time Series, Continuous, and Discrete Open Datacited by 31
- 2020Kamino: Constraint-Aware Differentially Private Data Synthesiscited by 23
- 2020P3GM: Private High-Dimensional Data Release via Privacy Preserving Phased Generative Modelcited by 21
- 2023DPMLBench: Holistic Evaluation of Differentially Private Machine Learningcited by 13
- 2019Differentially Private Synthetic Mixed-Type Data Generation For Unsupervised Learningcited by 11
- 2020Really Useful Synthetic Data -- A Framework to Evaluate the Quality of Differentially Private Synthetic Datacited by 11
- 2021HDMM: Optimizing error of high-dimensional statistical queries under differential privacycited by 11
- 2022On the Utility Recovery Incapability of Neural Net-based Differential Private Tabular Training Data Synthesizer under Privacy Deregulationcited by 8
- 2021Covariance's Loss is Privacy's Gain: Computationally Efficient, Private and Accurate Synthetic Datacited by 7
- 2023Statistical Theory of Differentially Private Marginal-based Data Synthesis Algorithmscited by 7
- 2015Principled Evaluation of Differentially Private Algorithms using DPBenchcited by 6
- 2021DP-SGD vs PATE: Which Has Less Disparate Impact on GANs?cited by 6
- 2022Spending Privacy Budget Fairly and Wiselycited by 2
Built on by
Citing papers per year: 2023: 4; 2024: 2; 2025: 3; 2026: 4.
13 papers.
Sort:
- 2023The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against "Truly Anonymous" Synthetic Datasetscited by 14
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 12
- 2025Synthetic Tabular Data: Methods, Attacks and Defensescited by 8
- 2023FLAIM: AIM-based Synthetic Data Generation in the Federated Settingcited by 6
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Datacited by 4
- 2023When Synthetic Data Met Regulationcited by 3
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generationcited by 2
- 2023On the Challenges of Deploying Privacy-Preserving Synthetic Data in the Enterprisecited by 1
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspectivecited by 1
- 2026Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Datacited by 1
- 2024RDP: Ranked Differential Privacy for Facial Feature Protection in Multiscale Sparsified Subspacecited by 0
- 2026Tight Auditing of Differential Privacy in MST and AIMcited by 0
1 more
- 2026Disparate Impact in Synthetic Data Generationcited by 0
- 2026Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Data8 Jul 2026
- 2026Disparate Impact in Synthetic Data Generation11 Jun 2026
- 2026Tight Auditing of Differential Privacy in MST and AIM20 Apr 2026
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective30 Jan 2026
- 2025Synthetic Tabular Data: Methods, Attacks and Defenses6 Jun 2025
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generation31 May 2025
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data9 Apr 2025
- 2024RDP: Ranked Differential Privacy for Facial Feature Protection in Multiscale Sparsified Subspace1 Aug 2024
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging20 Jun 2024
- 2023The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against "Truly Anonymous" Synthetic Datasets8 Dec 2023
- 2023FLAIM: AIM-based Synthetic Data Generation in the Federated Setting5 Oct 2023
- 2023On the Challenges of Deploying Privacy-Preserving Synthetic Data in the Enterprise9 Jul 2023
1 more
- 2023When Synthetic Data Met Regulation1 Jul 2023
- 2023The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against "Truly Anonymous" Synthetic Datasetscited by 14
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 12
- 2025Synthetic Tabular Data: Methods, Attacks and Defensescited by 8
- 2023FLAIM: AIM-based Synthetic Data Generation in the Federated Settingcited by 6
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Datacited by 4
- 2023When Synthetic Data Met Regulationcited by 3
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generationcited by 2
- 2023On the Challenges of Deploying Privacy-Preserving Synthetic Data in the Enterprisecited by 1
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspectivecited by 1
- 2026Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Datacited by 1
- 2024RDP: Ranked Differential Privacy for Facial Feature Protection in Multiscale Sparsified Subspacecited by 0
- 2026Tight Auditing of Differential Privacy in MST and AIMcited by 0
12 most cited of 13 All 13 (JSON)
- 2026Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Data8 Jul 2026
- 2026Disparate Impact in Synthetic Data Generation11 Jun 2026
- 2026Tight Auditing of Differential Privacy in MST and AIM20 Apr 2026
- 2026Rethinking Anonymity Claims in Synthetic Data Generation: A Model-Centric Privacy Attack Perspective30 Jan 2026
- 2025Synthetic Tabular Data: Methods, Attacks and Defenses6 Jun 2025
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generation31 May 2025
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data9 Apr 2025
- 2024RDP: Ranked Differential Privacy for Facial Feature Protection in Multiscale Sparsified Subspace1 Aug 2024
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debugging20 Jun 2024
- 2023The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against "Truly Anonymous" Synthetic Datasets8 Dec 2023
- 2023FLAIM: AIM-based Synthetic Data Generation in the Federated Setting5 Oct 2023
- 2023On the Challenges of Deploying Privacy-Preserving Synthetic Data in the Enterprise9 Jul 2023
12 newest of 13 All 13 (JSON)