Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewriting
Not on the map. Why?
Abstract (arXiv)
The task of textitDifferentially Private Text Rewriting is a class of text privatization techniques in which (sensitive) input textual documents are textitrewritten under Differential Privacy (DP) guarantees. The motivation behind such methods is to hide both explicit and implicit identifiers that could be contained in text, while still retaining the semantic meaning of the original text, thus preserving utility. Recent years have seen an uptick in research output in this field, offering a diverse array of word-, sentence-, and document-level DP rewriting methods. Common to these methods is the selection of a privacy budget (i.e., the varepsilon parameter), which governs the degree to which a text is privatized. One major limitation of previous works, stemming directly from the unique structure of language itself, is the lack of consideration of textitwhere the privacy budget should be allocated, as not all aspects of language, and therefore text, are equally sensitive or personal. In this work, we are the first to address this shortcoming, asking the question of how a given privacy budget can be intelligently and sensibly distributed amongst a target document. We construct and evaluate a toolkit of linguistics- and NLP-based methods used to allocate a privacy budget to constituent tokens in a text document. In a series of privacy and utility experiments, we empirically demonstrate that given the same privacy budget, intelligent distribution leads to higher privacy levels and more positive trade-offs than a naive distribution of varepsilon. Our work highlights the intricacies of text privatization with DP, and furthermore, it calls for further work on finding more efficient ways to maximize the privatization benefits offered by DP in text rewriting.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 31 of its 52 references that are in the map. First posted on arXiv 28 Mar 2025.
Builds on
31 of 52 references.
References · 31
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,181
- 2023Towards General Text Embeddings with Multi-stage Contrastive Learningcited by 723
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
- 2023From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacycited by 143
- 2019Privacy- and Utility-Preserving Textual Analysis via Calibrated Multivariate Perturbationscited by 119
- 2024On Protecting the Data Privacy of Large Language Models (LLMs): A Surveycited by 96
19 more
- 2021Differential Privacy for Text Analytics via Natural Text Sanitizationcited by 77
- 2021DocNLI: A Large-scale Dataset for Document-level Natural Language Inferencecited by 75
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2018Generalised Differential Privacy for Text Document Processingcited by 52
- 2022A Customized Text Sanitization Mechanism with Differential Privacycited by 52
- 2021TEM: High Utility Metric Differential Privacy on Textcited by 43
- 2019ER-AE: Differentially Private Text Generation for Authorship Anonymizationcited by 35
- 2022DP-Rewrite: Towards Reproducibility and Transparency in Differentially Private Text Rewritingcited by 28
- 2023DP-BART for Privatized Text Rewriting under Local Differential Privacycited by 28
- 2021When differential privacy meets NLP: The devil is in the detailcited by 25
- 2018SynTF: Synthetic and Differentially Private Term Frequency Vectors for Privacy-Preserving Text Miningcited by 21
- 2024Differentially Private Knowledge Distillation via Synthetic Text Generationcited by 18
- 2022Sentence-level Privacy for Document Embeddingscited by 16
- 2023Guiding Text-to-Text Privatization by Syntaxcited by 14
- 2024Thinking Outside of the Differential Privacy Box: A Case Study in Text Privatization with Language Model Promptingcited by 11
- 20241-Diffractor: Efficient and Utility-Preserving Text Obfuscation Leveraging Word-Level Metric Differential Privacycited by 10
- 2020Research Challenges in Designing Differentially Private Text Generation Mechanismscited by 7
- 2023DP-NMT: Scalable Differentially-Private Machine Translationcited by 7
- 2024A Collocation-based Method for Addressing Challenges in Word-level Metric Differential Privacycited by 2
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026STAMP: Selective Task-Aware Mechanism for Text Privacycited by 2
- 2025The Double-edged Sword of LLM-based Data Reconstruction: Understanding and Mitigating Contextual Vulnerability in Word-level Differential Privacy Text Sanitizationcited by 1
- 2026A Systematic Exploration of Text Decomposition and Budget Distribution in Differentially Private Text Obfuscationcited by 1
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatizationcited by 0
- 2026DP-IPI: A Hybrid Differential Privacy Text Rewriting Mechanism for Indirect Personal Identifiers in Clinical Textscited by 0
- 2026DP-IPI: A Hybrid Differential Privacy Text Rewriting Mechanism for Indirect Personal Identifiers in Clinical Texts31 Aug 2026
- 2026PrivBench: A Holistic and Modular Benchmarking Platform for Evaluating Text-to-Text Privatization30 Aug 2026
- 2026A Systematic Exploration of Text Decomposition and Budget Distribution in Differentially Private Text Obfuscation1 May 2026
- 2026STAMP: Selective Task-Aware Mechanism for Text Privacy12 Mar 2026
- 2025The Double-edged Sword of LLM-based Data Reconstruction: Understanding and Mitigating Contextual Vulnerability in Word-level Differential Privacy Text Sanitization26 Aug 2025