Generating Synthetic Data with Formal Privacy Guarantees: State of the Art and the Road Ahead
Not on the map. Why?
Abstract (arXiv)
Privacy-preserving synthetic data offers a promising solution to harness segregated data in high-stakes domains where information is compartmentalized for regulatory, privacy, or institutional reasons. This survey provides a comprehensive framework for understanding the landscape of privacy-preserving synthetic data, presenting the theoretical foundations of generative models and differential privacy followed by a review of state-of-the-art methods across tabular data, images, and text. Our synthesis of evaluation approaches highlights the fundamental trade-off between utility for down-stream tasks and privacy guarantees, while identifying critical research gaps: the lack of realistic benchmarks representing specialized domains and insufficient empirical evaluations required to contextualise formal guarantees. Through empirical analysis of four leading methods on five real-world datasets from specialized domains, we demonstrate significant performance degradation under realistic privacy constraints (ε ≤ 4), revealing a substantial gap between results reported on general domain benchmarks and performance on domain-specific data. %Our findings highlight key challenges including unaccounted privacy leakage, insufficient empirical verification of formal guarantees, and a critical deficit of realistic benchmarks. These challenges underscore the need for robust evaluation frameworks, standardized benchmarks for specialized domains, and improved techniques to address the unique requirements of privacy-sensitive fields such that this technology can deliver on its considerable potential.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 80 of its 149 references that are in the map. First posted on arXiv 26 Mar 2025.
Builds on
80 of 149 references.
References · 80
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
38 more
- 2016Improved Techniques for Training GANscited by 2,938
- 2016Deep Learning with Differential Privacycited by 2,682
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2018Deep contextualized word representationscited by 2,285
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,538
- 2019Normalizing Flows for Probabilistic Modeling and Inferencecited by 1,315
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,151
- 2019An Introduction to Variational Autoencoderscited by 997
- 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 883
- 2021Membership Inference Attacks From First Principlescited by 839
- 2019Modeling Tabular data using Conditional GANcited by 695
- 2017Renyi Differential Privacycited by 643
- 2024OLMo: Accelerating the Science of Language Modelscited by 599
- 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 475
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 466
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2022TabDDPM: Modelling Tabular Data with Diffusion Modelscited by 373
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2013The Composition Theorem for Differential Privacycited by 290
- 2022Language Models are Realistic Tabular Data Generatorscited by 290
- 2018Scalable Private Learning with PATEcited by 266
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2018Differentially Private Generative Adversarial Networkcited by 235
- 2021Generating Datasets with Pretrained Language Modelscited by 192
- 2023Mixed-Type Tabular Data Synthesis with Score-based Diffusion in Latent Spacecited by 183
- 2023GPTs are GPTs: An Early Look at the Labor Market Impact Potential of Large Language Modelscited by 174
- 2021CTAB-GAN: Effective Table Data Synthesizingcited by 156
- 2020DP-CGAN: Differentially Private Synthetic Data and Label Generationcited by 118
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2020Synthetic Data -- Anonymisation Groundhog Daycited by 105
- 2023REaLTabFormer: Generating Realistic Relational and Tabular Data using Transformerscited by 93
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
- 2023Differentially Private Diffusion Models Generate Useful Synthetic Imagescited by 85
- 2015Distributed Gaussian Processescited by 84
50 most cited of 80 All 80 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 1.
4 papers.
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generationcited by 7
- 2025SynBench: A Benchmark for Differentially Private Text Generationcited by 4
- 2025Virus Infection Attack on LLMs: Your Poisoning Can Spread "VIA" Synthetic Datacited by 2
- 2026Generating High-quality Privacy-preserving Synthetic Datacited by 0
- 2026Generating High-quality Privacy-preserving Synthetic Data6 Feb 2026
- 2025Virus Infection Attack on LLMs: Your Poisoning Can Spread "VIA" Synthetic Data27 Sep 2025
- 2025SynBench: A Benchmark for Differentially Private Text Generation18 Sep 2025
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generation12 Sep 2025