Neural Text Sanitization with Privacy Risk Indicators: An Empirical Analysis
Not on the map. Why?
Abstract (arXiv)
Text sanitization is the task of redacting a document to mask all occurrences of (direct or indirect) personal identifiers, with the goal of concealing the identity of the individual(s) referred in it. In this paper, we consider a two-step approach to text sanitization and provide a detailed analysis of its empirical performance on two recently published datasets: the Text Anonymization Benchmark (Pil'an et al., 2022) and a collection of Wikipedia biographies (Papadopoulou et al., 2022). The text sanitization process starts with a privacy-oriented entity recognizer that seeks to determine the text spans expressing identifiable personal information. This privacy-oriented entity recognizer is trained by combining a standard named entity recognition model with a gazetteer populated by person-related terms extracted from Wikidata. The second step of the text sanitization process consists in assessing the privacy risk associated with each detected text span, either isolated or in combination with other text spans. We present five distinct indicators of the re-identification risk, respectively based on language model probabilities, text span classification, sequence labelling, perturbations, and web search. We provide a contrastive analysis of each privacy indicator and highlight their benefits and limitations, notably in relation to the available labeled data.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 25 of its 60 references that are in the map. First posted on arXiv 22 Oct 2023.
Builds on
25 of 60 references.
References · 25
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2020Longformer: The Long-Document Transformercited by 3,413
- 2016Neural Architectures for Named Entity Recognitioncited by 550
- 2019AutoML: A Survey of the State-of-the-Artcited by 390
- 2019Is Attention Interpretable?cited by 389
- 2020AutoGluon-Tabular: Robust and Accurate AutoML for Structured Datacited by 383
- 2016Understanding Neural Networks through Representation Erasurecited by 224
- 2015Named Entity Recognition with Bidirectional LSTM-CNNscited by 201
- 2015Visualizing and Understanding Neural Models in NLPcited by 200
- 2023DeID-GPT: Zero-shot Medical Text De-Identification by GPT-4cited by 130
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 95
13 more
- 2016De-identification of Patient Notes with Recurrent Neural Networkscited by 88
- 2018Generalised Differential Privacy for Text Document Processingcited by 52
- 2019Leveraging Hierarchical Representations for Preserving Privacy and Utility in Textcited by 50
- 2021ADePT: Auto-encoder based Differentially Private Text Transformationcited by 31
- 2023DP-BART for Privatized Text Rewriting under Local Differential Privacycited by 28
- 2014C-sanitized: a privacy model for document redaction and sanitizationcited by 27
- 2019Saliency-driven Word Alignment Interpretation for Neural Machine Translationcited by 27
- 2021When differential privacy meets NLP: The devil is in the detailcited by 25
- 2020Data Minimization for GDPR Compliance in Machine Learning Modelscited by 21
- 2023Privacy- and Utility-Preserving NLP with Anonymized Data: A case study of Pseudonymizationcited by 18
- 2021No Intruder, no Validity: Evaluation Criteria for Privacy-Preserving Text Anonymizationcited by 13
- 2022Bootstrapping Text Anonymization Models with Distant Supervisioncited by 8
- 2018A survey of automatic de-identification of longitudinal clinical narrativescited by 3
Built on by
Citing papers per year: 2024: 1; 2025: 1; 2026: 3.
5 papers.
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2026Subject-level Inference for Realistic Text Anonymization Evaluationcited by 1
- 2024Preempting Text Sanitization Utility in Resource-Constrained Privacy-Preserving LLM Interactionscited by 0
- 2025CTIGuardian: A Few-Shot Framework for Mitigating Privacy Leakage in Fine-Tuned LLMscited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatizationcited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2026Subject-level Inference for Realistic Text Anonymization Evaluation23 Apr 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2025CTIGuardian: A Few-Shot Framework for Mitigating Privacy Leakage in Fine-Tuned LLMs15 Dec 2025
- 2024Preempting Text Sanitization Utility in Resource-Constrained Privacy-Preserving LLM Interactions18 Nov 2024