DP-2Stage: Adapting Language Models as Differentially Private Tabular Data Generators
Not on the map. Why?
Abstract (arXiv)
Generating tabular data under differential privacy (DP) protection ensures theoretical privacy guarantees but poses challenges for training machine learning models, primarily due to the need to capture complex structures under noisy supervision signals. Recently, pre-trained Large Language Models (LLMs) -- even those at the scale of GPT-2 -- have demonstrated great potential in synthesizing tabular data. However, their applications under DP constraints remain largely unexplored. In this work, we address this gap by applying DP techniques to the generation of synthetic tabular data. Our findings shows that LLMs face difficulties in generating coherent text when fine-tuned with DP, as privacy budgets are inefficiently allocated to non-private elements like table structures. To overcome this, we propose DP-2Stage, a two-stage fine-tuning framework for differentially private tabular data generation. The first stage involves non-private fine-tuning on a pseudo dataset, followed by DP fine-tuning on a private dataset. Our empirical results show that this approach improves performance across various settings and metrics compared to directly fine-tuned LLMs in DP contexts. We release our code and setup at https://github.com/tejuafonja/DP-2Stage.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 33 of its 42 references that are in the map. First posted on arXiv 3 Dec 2024.
Builds on
33 of 42 references.
References · 33
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2015Neural Machine Translation of Rare Words with Subword Unitscited by 2,898
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,020
- 2019Modeling Tabular data using Conditional GANcited by 695
21 more
- 2017Renyi Differential Privacycited by 643
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2022TabDDPM: Modelling Tabular Data with Diffusion Modelscited by 373
- 2022Language Models are Realistic Tabular Data Generatorscited by 290
- 2018Differentially Private Generative Adversarial Networkcited by 235
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2017Generating Multi-label Discrete Patient Records using Generative Adversarial Networkscited by 197
- 2018Data Synthesis based on Generative Adversarial Networkscited by 184
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2019Reconstruction and Membership Inference Attacks against Generative Modelscited by 122
- 2020Synthetic Data -- Anonymisation Groundhog Daycited by 105
- 2021Winning the NIST Contest: A scalable and general approach to differentially private synthetic datacited by 101
- 2022AIM: An Adaptive and Iterative Mechanism for Differentially Private Synthetic Datacited by 88
- 2019Hypothesis Testing Interpretations and Renyi Differential Privacycited by 84
- 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 80
- 2024Differentially Private Tabular Data Synthesis using Large Language Modelscited by 16
- 2018Generating Synthetic but Plausible Healthcare Record Datasetscited by 12
- 2023MargCTGAN: A "Marginally'' Better CTGAN for the Low Sample Regimecited by 4
- 2024Language Models as Zero-shot Lossless Gradient Compressors: Towards General Neural Parameter Prior Modelscited by 4
- 2024Towards Biologically Plausible and Private Gene Expression Data Generationcited by 2
Built on by
Citing papers per year: 2025: 4; 2026: 1.
5 papers.
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generationcited by 7
- 2025Is API Access to LLMs Useful for Generating Private Synthetic Tabular Data?cited by 5
- 2025Generating Synthetic Data with Formal Privacy Guarantees: State of the Art and the Road Aheadcited by 4
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generationcited by 3
- 2026Privately Fine-Tuned LLMs Preserve Temporal Dynamics in Tabular Datacited by 1
- 2026Privately Fine-Tuned LLMs Preserve Temporal Dynamics in Tabular Data2 Feb 2026
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generation9 Dec 2025
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generation12 Sep 2025
- 2025Generating Synthetic Data with Formal Privacy Guarantees: State of the Art and the Road Ahead26 Mar 2025
- 2025Is API Access to LLMs Useful for Generating Private Synthetic Tabular Data?10 Feb 2025