A Unified View of Differentially Private Deep Generative Modeling
Not on the map. Why?
Abstract (arXiv)
The availability of rich and vast data sources has greatly advanced machine learning applications in various domains. However, data with privacy concerns comes with stringent regulations that frequently prohibited data access and data sharing. Overcoming these obstacles in compliance with privacy considerations is key for technological progress in many real-world application scenarios that involve privacy sensitive data. Differentially private (DP) data publishing provides a compelling solution, where only a sanitized form of the data is publicly released, enabling privacy-preserving downstream analysis and reproducible research in sensitive domains. In recent years, various approaches have been proposed for achieving privacy-preserving high-dimensional data generation by private training on top of deep neural networks. In this paper, we present a novel unified view that systematizes these approaches. Our view provides a joint design space for systematically deriving methods that cater to different use cases. We then discuss the strengths, limitations, and inherent correlations between different approaches, aiming to shed light on crucial aspects and inspire future research. We conclude by presenting potential paths forward for the field of DP data generation, with the aim of steering the community toward making the next important steps in advancing privacy-preserving learning.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 79 of its 119 references that are in the map. First posted on arXiv 27 Sep 2023.
Builds on
79 of 119 references.
References · 79
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2016Deep Learning with Differential Privacycited by 2,682
- 2017Improved Training of Wasserstein GANscited by 2,223
- 2015Variational Inference with Normalizing Flowscited by 2,161
- 2014Conditional Generative Adversarial Netscited by 2,152
- 2016WaveNet: A Generative Model for Raw Audiocited by 1,710
- 2018Glow: Generative Flow with Invertible 1x1 Convolutionscited by 1,539
- 2018Demystifying MMD GANscited by 1,268
38 more
- 2016Conditional Image Generation with PixelCNN Decoderscited by 859
- 2016Pixel Recurrent Neural Networkscited by 814
- 2017Renyi Differential Privacycited by 643
- 2016Conditional Image Synthesis With Auxiliary Classifier GANscited by 562
- 2016f-GAN: Training Generative Neural Samplers using Variational Divergence Minimizationcited by 504
- 2017Opening the Black Box of Deep Neural Networks via Informationcited by 494
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
- 2017Learning Generative Models with Sinkhorn Divergencescited by 310
- 2017Are GANs Created Equal? A Large-Scale Studycited by 267
- 2018Scalable Private Learning with PATEcited by 266
- 2017MMD GAN: Towards Deeper Understanding of Moment Matching Networkcited by 251
- 2018Differentially Private Generative Adversarial Networkcited by 235
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 233
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 218
- 2020Auditing Differentially Private Machine Learning: How Private is Private SGD?cited by 213
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2021How Faithful is your Synthetic Data? Sample-level Metrics for Evaluating and Auditing Generative Modelscited by 193
- 2019Learning Likelihoods with Conditional Normalizing Flowscited by 170
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2020DP-CGAN: Differentially Private Synthetic Data and Label Generationcited by 118
- 2022Differentially Private Diffusion Modelscited by 118
- 2020GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generatorscited by 117
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2020Synthetic Data -- Anonymisation Groundhog Daycited by 105
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
- 2019Generative Models for Effective ML on Private, Decentralized Datasetscited by 85
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2019Hypothesis Testing Interpretations and Renyi Differential Privacycited by 84
- 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 80
- 2023Flocks of Stochastic Parrots: Differentially Private Prompt Learning for Large Language Modelscited by 80
- 2020DP-MERF: Differentially Private Mean Embeddings with Random Features for Practical Privacy-Preserving Data Generationcited by 78
- 2017Practical Coreset Constructions for Machine Learningcited by 75
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2022Synthetic Data -- what, why and how?cited by 66
- 2022FedDM: Iterative Distribution Matching for Communication-Efficient Federated Learningcited by 65
- 2023Differentially Private Synthetic Data via Foundation Model APIs 1: Imagescited by 63
50 most cited of 79 All 79 (JSON)
Built on by
Citing papers per year: 2023: 1; 2024: 1; 2025: 2.
4 papers.
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 12
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
- 2024Advancing Retail Data Science: Comprehensive Evaluation of Synthetic Datacited by 5
- 2025Private Training & Data Generation by Clustering Embeddingscited by 0
- 2025Private Training & Data Generation by Clustering Embeddings20 Jun 2025
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis18 Mar 2025
- 2024Advancing Retail Data Science: Comprehensive Evaluation of Synthetic Data19 Jun 2024
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining19 Oct 2023