Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model
On the map: Synthetic data and self-improvement for LLMs → Privacy-preserving tabular data synthesis
Abstract (arXiv)
Differentially private (DP) synthetic data enables the use of sensitive datasets while providing strong privacy guarantees. Recently, Private Evolution (PE) has emerged as a promising framework for generating DP synthetic data using only inference APIs of foundation models. However, suitable foundation models are not always available for every private data domain. In this paper, we show that PE is more general than previously understood and can incorporate APIs beyond foundation models. In particular, we show that state-of-the-art non-neural-network data synthesizers, including computer graphics-based image generators and physics simulation tools (which we refer to as simulators), integrate naturally into PE. We call the resulting method Sim-PE. Sim-PE broadens the applicability of PE while improving performance. For image synthesis, Sim-PE improves downstream classification accuracy by up to 3x, reduces FID by up to 80%, and is significantly more efficient. We further show that simulators and foundation models can be seamlessly combined within Sim-PE for additional gains. Beyond performance improvements, Sim-PE enables new DP applications that are difficult or impossible for existing methods, including generating DP control signals whose execution reproduces the distribution of private observations. The code is open-sourced in the Private Evolution Python library: https://github.com/microsoft/DPSDA
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Placed in Privacy-preserving tabular data synthesis, one of 13 directions in Synthetic data and self-improvement for LLMs. Builds on 37 of its 66 references that are in the map. First posted on arXiv 8 Feb 2025.
Builds on
37 of 66 references.
Closest ancestors · 2
Same direction, newest first
- 2025Contrastive Private Data Synthesis via Weighted Multi-PLM Fusion1 Feb
- 2024Differentially Private Synthetic Data via Foundation Model APIs 2: Text4 Mar
Other references · 35
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
- 2022Generative Adversarial Networkscited by 5,627
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2016Wide Residual Networkscited by 3,070
- 2016Improved Techniques for Training GANscited by 2,970
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2022Kubric: A scalable dataset generatorcited by 381
- 2018Differentially Private Generative Adversarial Networkcited by 235
23 more
- 2021Fake It Till You Make It: Face analysis in the wild using synthetic data alonecited by 200
- 2019Meta-Sim: Learning to Generate Synthetic Datasetscited by 128
- 2022Differentially Private Diffusion Modelscited by 119
- 2020GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generatorscited by 117
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2022DigiFace-1M: 1 Million Digital Face Images for Face Recognitioncited by 92
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 86
- 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 81
- 2020DP-MERF: Differentially Private Mean Embeddings with Random Features for Practical Privacy-Preserving Data Generationcited by 78
- 2023Differentially Private Synthetic Data via Foundation Model APIs 1: Imagescited by 65
- 2020Meta-Sim2: Unsupervised Learning of Scene Structure for Synthetic Data Generationcited by 58
- 2021Don't Generate Me: Training Differentially Private Generative Models with Sinkhorn Divergencecited by 54
- 2022Exploring the Limits of Differentially Private Deep Learning with Group-wise Clippingcited by 52
- 2023SoK: Privacy-Preserving Data Synthesiscited by 38
- 2023DP-LDMs: Differentially Private Latent Diffusion Modelscited by 29
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2022Pre-trained Perceptual Features Improve Differentially Private Image Generationcited by 28
- 2023Selective Pre-training for Private Fine-tuningcited by 23
- 2021Hermite Polynomial Features for Private Data Generationcited by 21
- 2024Differentially Private Fine-Tuning of Diffusion Modelscited by 20
- 2024Distilled Decoding 1: One-step Sampling of Image Auto-regressive Models with Flow Matchingcited by 18
- 2023Differentially Private Neural Tangent Kernels for Privacy-Preserving Data Generationcited by 15
- 2023PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretrainingcited by 13
Built on by
Citing papers per year: 2025: 6; 2026: 7.
13 papers.
Sort:
By area:
- 2025POPri: Private Federated Learning using Preference-Optimized Synthetic Datacited by 14
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
- 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediariescited by 8
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generationcited by 7
- 2025Clustering and Median Aggregation Improve Differentially Private Inferencecited by 5
- 2025Private Evolution Convergescited by 2
- 2026Differentially Private Synthetic Data via APIs 4: Tabular Datacited by 2
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculumcited by 0
- 2026DP-RFT: Learning to Generate Synthetic Text via Differentially Private Reinforcement Fine-Tuningcited by 0
- 2026PE-means: Improved Differentially Private k-means Clustering through Private Evolutioncited by 0
- 2026Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Datacited by 0
- 2026QuanText: Protecting Dataset-Level Secrets in Textual Data Sharingcited by 0
- 2026FinancialAuditBench: Benchmark Construction under Differential Privacy Using Real-World Priors26 Sep 2026
- 2026QuanText: Protecting Dataset-Level Secrets in Textual Data Sharing16 Sep 2026
- 2026Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Data15 Jun 2026
- 2026Differentially Private Synthetic Data via APIs 4: Tabular Data6 Jun 2026
- 2026PE-means: Improved Differentially Private k-means Clustering through Private Evolution29 May 2026
- 2026DP-RFT: Learning to Generate Synthetic Text via Differentially Private Reinforcement Fine-Tuning20 Feb 2026
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum10 Jan 2026
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generation12 Sep 2025
- 2025Private Evolution Converges10 Jun 2025
- 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediaries9 Jun 2025
- 2025Clustering and Median Aggregation Improve Differentially Private Inference5 Jun 2025
- 2025POPri: Private Federated Learning using Preference-Optimized Synthetic Data23 Apr 2025
1 more
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
- 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediariescited by 8
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generationcited by 7
- 2025Clustering and Median Aggregation Improve Differentially Private Inferencecited by 5
- 2025Private Evolution Convergescited by 2
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculumcited by 0
- 2026DP-RFT: Learning to Generate Synthetic Text via Differentially Private Reinforcement Fine-Tuningcited by 0
- 2026PE-means: Improved Differentially Private k-means Clustering through Private Evolutioncited by 0
- 2026QuanText: Protecting Dataset-Level Secrets in Textual Data Sharingcited by 0
- 2026FinancialAuditBench: Benchmark Construction under Differential Privacy Using Real-World Priorscited by 0
- 2026FinancialAuditBench: Benchmark Construction under Differential Privacy Using Real-World Priors26 Sep 2026
- 2026QuanText: Protecting Dataset-Level Secrets in Textual Data Sharing16 Sep 2026
- 2026PE-means: Improved Differentially Private k-means Clustering through Private Evolution29 May 2026
- 2026DP-RFT: Learning to Generate Synthetic Text via Differentially Private Reinforcement Fine-Tuning20 Feb 2026
- 2026From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum10 Jan 2026
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generation12 Sep 2025
- 2025Private Evolution Converges10 Jun 2025
- 2025Synthesize Privacy-Preserving High-Resolution Images via Private Textual Intermediaries9 Jun 2025
- 2025Clustering and Median Aggregation Improve Differentially Private Inference5 Jun 2025
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesis18 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2025PCEvolve: Private Contrastive Evolution for Synthetic Dataset Generation via Few-Shot Private Data and Generative APIs
- 2024Leveraging Programmatically Generated Synthetic Data for Differentially Private Diffusion Training
- 2025SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation
- 2025From Easy to Hard: Building a Shortcut for Differentially Private Image Synthesis
- 2024SafeSynthDP: Leveraging Large Language Models for Privacy-Preserving Synthetic Data Generation Using Differential Privacy
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generation
- 2025The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data