mlsanityData to 14 Oct 2026

Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewriting

arXiv 2503.22379 ↗First posted 28 Mar 2025cs.CR cs.CLcited by 5

Not on the map. Why?

Abstract (arXiv)

The task of textitDifferentially Private Text Rewriting is a class of text privatization techniques in which (sensitive) input textual documents are textitrewritten under Differential Privacy (DP) guarantees. The motivation behind such methods is to hide both explicit and implicit identifiers that could be contained in text, while still retaining the semantic meaning of the original text, thus preserving utility. Recent years have seen an uptick in research output in this field, offering a diverse array of word-, sentence-, and document-level DP rewriting methods. Common to these methods is the selection of a privacy budget (i.e., the varepsilon parameter), which governs the degree to which a text is privatized. One major limitation of previous works, stemming directly from the unique structure of language itself, is the lack of consideration of textitwhere the privacy budget should be allocated, as not all aspects of language, and therefore text, are equally sensitive or personal. In this work, we are the first to address this shortcoming, asking the question of how a given privacy budget can be intelligently and sensibly distributed amongst a target document. We construct and evaluate a toolkit of linguistics- and NLP-based methods used to allocate a privacy budget to constituent tokens in a text document. In a series of privacy and utility experiments, we empirically demonstrate that given the same privacy budget, intelligent distribution leads to higher privacy levels and more positive trade-offs than a naive distribution of varepsilon. Our work highlights the intricacies of text privatization with DP, and furthermore, it calls for further work on finding more efficient ways to maximize the privatization benefits offered by DP in text rewriting.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 31 of its 52 references that are in the map. First posted on arXiv 28 Mar 2025.

Builds on

31 of 52 references.

References · 31

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  3. 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
  4. 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
  5. 2020Extracting Training Data from Large Language Modelscited by 2,189
  6. 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,181
  7. 2023Towards General Text Embeddings with Multi-stage Contrastive Learningcited by 723
  8. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  9. 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
  10. 2023From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacycited by 143
  11. 2019Privacy- and Utility-Preserving Textual Analysis via Calibrated Multivariate Perturbationscited by 119
  12. 2024On Protecting the Data Privacy of Large Language Models (LLMs): A Surveycited by 96
19 more
  1. 2021Differential Privacy for Text Analytics via Natural Text Sanitizationcited by 77
  2. 2021DocNLI: A Large-scale Dataset for Document-level Natural Language Inferencecited by 75
  3. 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
  4. 2018Generalised Differential Privacy for Text Document Processingcited by 52
  5. 2022A Customized Text Sanitization Mechanism with Differential Privacycited by 52
  6. 2021TEM: High Utility Metric Differential Privacy on Textcited by 43
  7. 2019ER-AE: Differentially Private Text Generation for Authorship Anonymizationcited by 35
  8. 2022DP-Rewrite: Towards Reproducibility and Transparency in Differentially Private Text Rewritingcited by 28
  9. 2023DP-BART for Privatized Text Rewriting under Local Differential Privacycited by 28
  10. 2021When differential privacy meets NLP: The devil is in the detailcited by 25
  11. 2018SynTF: Synthetic and Differentially Private Term Frequency Vectors for Privacy-Preserving Text Miningcited by 21
  12. 2024Differentially Private Knowledge Distillation via Synthetic Text Generationcited by 18
  13. 2022Sentence-level Privacy for Document Embeddingscited by 16
  14. 2023Guiding Text-to-Text Privatization by Syntaxcited by 14
  15. 2024Thinking Outside of the Differential Privacy Box: A Case Study in Text Privatization with Language Model Promptingcited by 11
  16. 20241-Diffractor: Efficient and Utility-Preserving Text Obfuscation Leveraging Word-Level Metric Differential Privacycited by 10
  17. 2020Research Challenges in Designing Differentially Private Text Generation Mechanismscited by 7
  18. 2023DP-NMT: Scalable Differentially-Private Machine Translationcited by 7
  19. 2024A Collocation-based Method for Addressing Challenges in Word-level Metric Differential Privacycited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.