Scaling Laws for Differentially Private Language Models
Not on the map. Why?
Abstract (arXiv)
Scaling laws have emerged as important components of large language model (LLM) training as they can predict performance gains through scale, and provide guidance on important hyper-parameter choices that would otherwise be expensive. LLMs also rely on large, high-quality training datasets, like those sourced from (sometimes sensitive) user data. Training models on this sensitive user data requires careful privacy protections like differential privacy (DP). However, the dynamics of DP training are significantly different, and consequently their scaling laws are not yet fully understood. In this work, we establish scaling laws that accurately model the intricacies of DP LLM training, providing a complete picture of the compute-privacy-utility tradeoffs and the optimal training configurations in many settings.
Key facts. Cited by 22 papers in the map (data through 14 Oct 2026). First posted on arXiv 31 Jan 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 8; 2026: 14.
22 papers.
Sort:
By area:
- 2025VaultGemma: A Differentially Private Gemma Modelcited by 16
- 2025Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Trainingcited by 15
- 2025Mitigating Unintended Memorization with LoRA in Federated Learning for LLMscited by 7
- 2025ContextLeak: Auditing Leakage in Private In-Context Learning Methodscited by 4
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGDcited by 4
- 2026Length Generalization Bounds for Transformerscited by 4
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2026Efficient privacy loss accounting for subsampling and random allocationcited by 3
- 2026On the Price of Privacy for Language Identification and Generationcited by 3
- 2025Evaluating the Robustness of Chinchilla Compute-Optimal Scalingcited by 2
- 2025On the Gradient Complexity of Private Optimization with Private Oraclescited by 2
- 2026Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspectivecited by 2
10 more
- 2026Less Random, More Private: What is the Optimal Subsampling Scheme for DP-SGD?cited by 2
- 2025Cocoon: A System Architecture for Differentially Private Training with Correlated Noisescited by 1
- 2025On Optimal Hyperparameters for Differentially Private Deep Transfer Learningcited by 1
- 2026Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacycited by 1
- 2026Protecting Private Code in IDE Autocomplete using Differential Privacycited by 0
- 2026Amplified Patch-Level Differential Privacy for Free via Random Croppingcited by 0
- 2026ContinuousBench: Can Differentially Private Synthetic Text Improve Capabilities?cited by 0
- 2026The Privacy-Hallucination Tradeoff in Differentially Private Language Modelscited by 0
- 2026Memorisation bias in medical AIcited by 0
- 2026A Sharp Transition in Data Reconstruction under Differential Privacycited by 0
- 2026A Sharp Transition in Data Reconstruction under Differential Privacy29 Sep 2026
- 2026Memorisation bias in medical AI15 Sep 2026
- 2026The Privacy-Hallucination Tradeoff in Differentially Private Language Models31 Aug 2026
- 2026ContinuousBench: Can Differentially Private Synthetic Text Improve Capabilities?1 Jun 2026
- 2026Less Random, More Private: What is the Optimal Subsampling Scheme for DP-SGD?8 May 2026
- 2026On the Price of Privacy for Language Identification and Generation8 Apr 2026
- 2026Amplified Patch-Level Differential Privacy for Free via Random Cropping25 Mar 2026
- 2026Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspective3 Mar 2026
- 2026Efficient privacy loss accounting for subsampling and random allocation19 Feb 2026
- 2026Length Generalization Bounds for Transformers13 Feb 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2026Protecting Private Code in IDE Autocomplete using Differential Privacy30 Jan 2026
10 more
- 2026Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy19 Jan 2026
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD15 Jan 2026
- 2025ContextLeak: Auditing Leakage in Private In-Context Learning Methods18 Dec 2025
- 2025On the Gradient Complexity of Private Optimization with Private Oracles17 Nov 2025
- 2025On Optimal Hyperparameters for Differentially Private Deep Transfer Learning23 Oct 2025
- 2025VaultGemma: A Differentially Private Gemma Model15 Oct 2025
- 2025Cocoon: A System Architecture for Differentially Private Training with Correlated Noises8 Oct 2025
- 2025Evaluating the Robustness of Chinchilla Compute-Optimal Scaling28 Sep 2025
- 2025Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training27 Feb 2025
- 2025Mitigating Unintended Memorization with LoRA in Federated Learning for LLMs7 Feb 2025
- 2025VaultGemma: A Differentially Private Gemma Modelcited by 16
- 2025Mitigating Unintended Memorization with LoRA in Federated Learning for LLMscited by 7
- 2025ContextLeak: Auditing Leakage in Private In-Context Learning Methodscited by 4
- 2026Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGDcited by 4
- 2026Length Generalization Bounds for Transformerscited by 4
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2026Efficient privacy loss accounting for subsampling and random allocationcited by 3
- 2026On the Price of Privacy for Language Identification and Generationcited by 3
- 2025Evaluating the Robustness of Chinchilla Compute-Optimal Scalingcited by 2
- 2025On the Gradient Complexity of Private Optimization with Private Oraclescited by 2
- 2026Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspectivecited by 2
- 2026Less Random, More Private: What is the Optimal Subsampling Scheme for DP-SGD?cited by 2
12 most cited of 21 All 21 (JSON)
- 2026A Sharp Transition in Data Reconstruction under Differential Privacy29 Sep 2026
- 2026Memorisation bias in medical AI15 Sep 2026
- 2026The Privacy-Hallucination Tradeoff in Differentially Private Language Models31 Aug 2026
- 2026ContinuousBench: Can Differentially Private Synthetic Text Improve Capabilities?1 Jun 2026
- 2026Less Random, More Private: What is the Optimal Subsampling Scheme for DP-SGD?8 May 2026
- 2026On the Price of Privacy for Language Identification and Generation8 Apr 2026
- 2026Amplified Patch-Level Differential Privacy for Free via Random Cropping25 Mar 2026
- 2026Adaptive Methods Are Preferable in High Privacy Settings: An SDE Perspective3 Mar 2026
- 2026Efficient privacy loss accounting for subsampling and random allocation19 Feb 2026
- 2026Length Generalization Bounds for Transformers13 Feb 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2026Protecting Private Code in IDE Autocomplete using Differential Privacy30 Jan 2026
12 newest of 21 All 21 (JSON)