Differential Privacy, Linguistic Fairness, and Training Data Influence: Impossibility and Possibility Theorems for Multilingual Language Models
Not on the map. Why?
Abstract (arXiv)
Language models such as mBERT, XLM-R, and BLOOM aim to achieve multilingual generalization or compression to facilitate transfer to a large number of (potentially unseen) languages. However, these models should ideally also be private, linguistically fair, and transparent, by relating their predictions to training data. Can these requirements be simultaneously satisfied? We show that multilingual compression and linguistic fairness are compatible with differential privacy, but that differential privacy is at odds with training data influence sparsity, an objective for transparency. We further present a series of experiments on two common NLP tasks and evaluate multilingual compression and training data influence sparsity under different privacy guarantees, exploring these trade-offs in more detail. Our results suggest that we need to develop ways to jointly optimize for these objectives in order to find practical trade-offs.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 77 of its 107 references that are in the map. First posted on arXiv 17 Aug 2023.
Builds on
77 of 107 references.
References · 77
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,935
- 2016Deep Learning with Differential Privacycited by 2,728
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,984
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2019Similarity of Neural Network Representations Revisitedcited by 1,755
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2018XNLI: Evaluating Cross-lingual Sentence Representationscited by 915
- 2019How Contextual are Contextualized Word Representations? Comparing the Geometry of BERT, ELMo, and GPT-2 Embeddingscited by 784
38 more
- 2017Renyi Differential Privacycited by 650
- 2019How multilingual is Multilingual BERT?cited by 645
- 2020Making Monolingual Sentence Embeddings Multilingual using Knowledge Distillationcited by 593
- 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 580
- 2021Datasets: A Community Library for Natural Language Processingcited by 530
- 2018Massively Multilingual Sentence Embeddings for Zero-Shot Cross-Lingual Transfer and Beyondcited by 434
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
- 2017The (Un)reliability of saliency methodscited by 333
- 2019Differential Privacy Has Disparate Impact on Model Accuracycited by 316
- 2017Fairness in Criminal Justice Risk Assessments: The State of the Artcited by 315
- 2019Beto, Bentz, Becas: The Surprising Cross-Lingual Effectiveness of BERTcited by 301
- 2020Universal Dependencies v2: An Evergrowing Multilingual Treebank Collectioncited by 271
- 2019Representation Degeneration Problem in Training Natural Language Generation Modelscited by 255
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 235
- 2019WikiMatrix: Mining 135M Parallel Sentences in 1620 Language Pairs from Wikipediacited by 223
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 204
- 2018Representer Point Selection for Explaining Deep Neural Networkscited by 187
- 2019Cross-Lingual Ability of Multilingual BERT: An Empirical Studycited by 182
- 2019Emerging Cross-lingual Structure in Pretrained Language Modelscited by 181
- 2019On the Accuracy of Influence Functions for Measuring Group Effectscited by 147
- 2021On the Effectiveness of Adapter-based Tuning for Pretrained Language Model Adaptationcited by 147
- 2020Explaining Black Box Predictions and Unveiling Data Artifacts through Influence Functionscited by 144
- 2020The Discrete Gaussian for Differential Privacycited by 135
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021Do Feature Attribution Methods Correctly Attribute Features?cited by 98
- 2019Fairness risk measurescited by 85
- 2020On the Language Neutrality of Pre-trained Multilingual Representationscited by 85
- 2020On the Privacy Risks of Algorithmic Fairnesscited by 82
- 2019On Second-Order Group Influence Functions for Black-Box Predictionscited by 79
- 2021Input Similarity from the Neural Network Perspectivecited by 79
- 2018Differentially Private Fair Learningcited by 76
- 2018Private Selection from Private Candidatescited by 75
- 2020When Machine Learning Meets Privacy: A Survey and Outlookcited by 68
- 2020Differentially Private Representation for NLP: Formal Guarantee and An Empirical Study on Privacy and Fairnesscited by 67
- 2021First Align, then Predict: Understanding the Cross-Lingual Ability of Multilingual BERTcited by 65
- 2021IsoScore: Measuring the Uniformity of Embedding Space Utilizationcited by 53
50 most cited of 77 All 77 (JSON)
Built on by
Citing papers per year: 2025: 1.
1 paper.