Robust Utility-Preserving Text Anonymization Based on Large Language Models
Not on the map. Why?
Abstract (arXiv)
Anonymizing text that contains sensitive information is crucial for a wide range of applications. Existing techniques face the emerging challenges of the re-identification ability of large language models (LLMs), which have shown advanced capability in memorizing detailed information and reasoning over dispersed pieces of patterns to draw conclusions. When defending against LLM-based re-identification, anonymization could jeopardize the utility of the resulting anonymized data in downstream tasks. In general, the interaction between anonymization and data utility requires a deeper understanding within the context of LLMs. In this paper, we propose a framework composed of three key LLM-based components: a privacy evaluator, a utility evaluator, and an optimization component, which work collaboratively to perform anonymization. Extensive experiments demonstrate that the proposed model outperforms existing baselines, showing robustness in reducing the risk of re-identification while preserving greater data utility in downstream tasks. We provide detailed studies on these core modules. To consider large-scale and real-time applications, we investigate the distillation of the anonymization capabilities into lightweight models. All of our code and datasets will be made publicly available at https://github.com/UKPLab/acl2025-rupta.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 29 of its 66 references that are in the map. First posted on arXiv 16 Jul 2024.
Builds on
29 of 66 references.
References · 29
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2023GPT-4 Technical Reportcited by 18,396
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,045
- 2016Sequence-Level Knowledge Distillationcited by 801
- 2023Automatic Prompt Optimization with "Gradient Descent" and Beam Searchcited by 653
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 349
- 2023DeID-GPT: Zero-shot Medical Text De-Identification by GPT-4cited by 130
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 95
17 more
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2018Privacy-preserving Neural Representations of Textcited by 54
- 2019Leveraging Hierarchical Representations for Preserving Privacy and Utility in Textcited by 50
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
- 2014C-sanitized: a privacy model for document redaction and sanitizationcited by 27
- 2024IncogniText: Privacy-enhancing Conditional Text Anonymization via LLM-based Private Attribute Randomizationcited by 23
- 2023Privacy- and Utility-Preserving NLP with Anonymized Data: A case study of Pseudonymizationcited by 18
- 2023InstOptima: Evolutionary Multi-objective Instruction Optimization via Large Language Model-based Instruction Operatorscited by 17
- 2024Revisiting OPRO: The Limitations of Small-Scale LLMs as Optimizerscited by 15
- 2021No Intruder, no Validity: Evaluation Criteria for Privacy-Preserving Text Anonymizationcited by 13
- 2021A Privacy-Preserving Approach to Extraction of Personal Information through Automatic Annotation and Federated Learningcited by 12
- 2021De-identification of Privacy-related Entities in Job Postingscited by 12
- 2022Textwash -- automated open-source text anonymisationcited by 11
- 2023Text Sanitization Beyond Specific Domains: Zero-Shot Redaction & Substitution with Large Language Modelscited by 10
- 2023Anonymity at Risk? Assessing Re-Identification Capabilities of Large Language Modelscited by 7
- 2017Toward sensitive document release with privacy guaranteescited by 6
- 2020Differentially Private Adversarial Robustness Through Randomized Perturbationscited by 3
Built on by
Citing papers per year: 2025: 3; 2026: 7.
10 papers.
- 2025A Survey on Current Trends and Recent Advances in Text Anonymizationcited by 5
- 2025Self-Refining Language Model Anonymizers via Adversarial Distillationcited by 4
- 2025Context-Aware Classification and Grading of Sensitive Information in Online Conversational Health Datacited by 0
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Managementcited by 0
- 2026The Conundrum of Trustworthy Research on Attacking Personally Identifiable Information Removal Techniquescited by 0
- 2026Differentially Private De-identification of Dutch Clinical Notes: A Comparative Evaluationcited by 0
- 2026LLM Anonymization Against Agentic Re-Identificationcited by 0
- 2026PromptPET: Privacy-Utility Optimized Prompt Obfuscationcited by 0
- 2026P2Skill: Privacy Preserving Skill Distillation for Cloud-Local LLM Inference Systemscited by 0
- 2026AgentDoxx: Agentic Re-identification of Anonymized Text with Web Searchcited by 0
- 2026AgentDoxx: Agentic Re-identification of Anonymized Text with Web Search4 Oct 2026
- 2026P2Skill: Privacy Preserving Skill Distillation for Cloud-Local LLM Inference Systems14 Aug 2026
- 2026PromptPET: Privacy-Utility Optimized Prompt Obfuscation3 Jul 2026
- 2026LLM Anonymization Against Agentic Re-Identification29 May 2026
- 2026Differentially Private De-identification of Dutch Clinical Notes: A Comparative Evaluation23 Apr 2026
- 2026The Conundrum of Trustworthy Research on Attacking Personally Identifiable Information Removal Techniques9 Mar 2026
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management4 Feb 2026
- 2025Context-Aware Classification and Grading of Sensitive Information in Online Conversational Health Data25 Dec 2025
- 2025A Survey on Current Trends and Recent Advances in Text Anonymization29 Aug 2025
- 2025Self-Refining Language Model Anonymizers via Adversarial Distillation2 Jun 2025