NAP^2: A Benchmark for Naturalness and Privacy-Preserving Text Rewriting by Learning from Human
Not on the map. Why?
Abstract (arXiv)
The widespread use of cloud-based Large Language Models (LLMs) has heightened concerns over user privacy, as sensitive information may be inadvertently exposed during interactions with these services. To protect privacy before sending sensitive data to those models, we suggest sanitizing sensitive text using two common strategies used by humans: i) deleting sensitive expressions, and ii) obscuring sensitive details by abstracting them. To explore the issues and develop a tool for text rewriting, we curate the first corpus, coined NAP^2, through both crowdsourcing and the use of large language models (LLMs). Compared to the prior works on anonymization, the human-inspired approaches result in more natural rewrites and offer an improved balance between privacy protection and data utility, as demonstrated by our extensive experiments. Researchers interested in accessing the dataset are encouraged to contact the first or corresponding author via email.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 30 of its 57 references that are in the map. First posted on arXiv 6 Jun 2024.
Builds on
30 of 57 references.
References · 30
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2016Deep Learning with Differential Privacycited by 2,682
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2015A Diversity-Promoting Objective Function for Neural Conversation Modelscited by 1,068
- 2018Personalizing Dialogue Agents: I have a dog, do you have pets too?cited by 820
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 466
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 278
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 218
- 2018Dear Sir or Madam, May I introduce the GYAFC Dataset: Corpus, Benchmarks and Metrics for Formality Style Transfercited by 209
18 more
- 2018Delete, Retrieve, Generate: A Simple Approach to Sentiment and Style Transfercited by 191
- 2018Adversarial Removal of Demographic Attributes from Text Datacited by 166
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 94
- 2018Towards Robust and Privacy-preserving Text Representationscited by 75
- 2020Differentially Private Representation for NLP: Formal Guarantee and An Empirical Study on Privacy and Fairnesscited by 66
- 2023DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Passcited by 65
- 2022The Limits of Word Level Differential Privacycited by 63
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2018Generalised Differential Privacy for Text Document Processingcited by 52
- 2021XFORMAL: A Benchmark for Multilingual Formality Style Transfercited by 51
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
- 2019ER-AE: Differentially Private Text Generation for Authorship Anonymizationcited by 35
- 2022DP-Rewrite: Towards Reproducibility and Transparency in Differentially Private Text Rewritingcited by 28
- 2024Large Language Models are Advanced Anonymizerscited by 22
- 2019Context-Aware Local Differential Privacycited by 18
- 2019Listening between the Lines: Learning Personal Attributes from Conversationscited by 15
- 2018Style Obfuscation by Invariancecited by 10
- 2022Textwash -- automated open-source text anonymisationcited by 10
Built on by
Citing papers per year: 2025: 3; 2026: 5.
8 papers.
- 2025How do we measure privacy in text? A survey of text anonymization metricscited by 5
- 2025Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Searchcited by 3
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2025Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunitiescited by 2
- 2026Beyond Direct Identifiers: Probabilistic Privacy Risk Estimation for Privacy-Conscious LLM Query Delegationcited by 2
- 2026Introducing the Privacy-HSD Trade-off: Hate Speech Detection, but not at the Cost of Privacycited by 0
- 2026Aggregation-Aware Synthetic Text Generation Against Authorship Re-Identificationcited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatizationcited by 0
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2026Aggregation-Aware Synthetic Text Generation Against Authorship Re-Identification23 Aug 2026
- 2026Introducing the Privacy-HSD Trade-off: Hate Speech Detection, but not at the Cost of Privacy19 Aug 2026
- 2026Beyond Direct Identifiers: Probabilistic Privacy Risk Estimation for Privacy-Conscious LLM Query Delegation10 Aug 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2025How do we measure privacy in text? A survey of text anonymization metrics30 Nov 2025
- 2025Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Search25 Sep 2025
- 2025Towards Privacy-aware Mental Health AI Models: Advances, Challenges, and Opportunities1 Feb 2025