The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data
Not on the map. Why?
Abstract (arXiv)
Differentially Private (DP) generative marginal models are often used in the wild to release synthetic tabular datasets in lieu of sensitive data while providing formal privacy guarantees. These models approximate low-dimensional marginals or query workloads; crucially, they require the training data to be pre-discretized, i.e., continuous values need to first be partitioned into bins. However, as the range of values (or their domain) is often inferred directly from the training data, with the number of bins and bin edges typically defined arbitrarily, this approach can ultimately break end-to-end DP guarantees and may not always yield optimal utility. In this paper, we present an extensive measurement study of four discretization strategies in the context of DP marginal generative models. More precisely, we design DP versions of three discretizers (uniform, quantile, and k-means) and reimplement the PrivTree algorithm. We find that optimizing both the choice of discretizer and bin count can improve utility, on average, by almost 30% across six DP marginal models, compared to the default strategy and number of bins, with PrivTree being the best-performing discretizer in the majority of cases. We demonstrate that, while DP generative models with non-private discretization remain vulnerable to membership inference attacks, applying DP during discretization effectively mitigates this risk. Finally, we improve on an existing approach for automatically selecting the optimal number of bins, and achieve high utility while reducing both privacy budget consumption and computational overhead.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 33 of its 112 references that are in the map. First posted on arXiv 9 Apr 2025.
Builds on
33 of 112 references.
References · 33
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2018Differentially Private Generative Adversarial Networkcited by 235
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021Winning the NIST Contest: A scalable and general approach to differentially private synthetic datacited by 102
- 2022AIM: An Adaptive and Iterative Mechanism for Differentially Private Synthetic Datacited by 90
- 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 81
- 2019Graphical-model based estimation and inference for differential privacycited by 74
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 59
- 2022TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Datacited by 57
- 2019G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminatorscited by 53
- 2019Diffprivlib: The IBM Differential Privacy Librarycited by 53
- 2021Differentially Private Query Release Through Adaptive Projectioncited by 52
21 more
- 2018FIRST: A Framework for Optimizing Information Quality in Mobile Crowdsensing Systemscited by 50
- 2020New Oracle-Efficient Algorithms for Private Synthetic Data Releasecited by 43
- 2017Differentially Private Mixture of Generative Neural Networkscited by 39
- 2023SoK: Privacy-Preserving Data Synthesiscited by 38
- 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
- 2018Optimizing error of high-dimensional statistical queries under differential privacycited by 29
- 2023Achilles' Heels: Vulnerable Record Identification in Synthetic Data Publishingcited by 28
- 2015Differentially Private k-Means Clusteringcited by 27
- 2020Kamino: Constraint-Aware Differentially Private Data Synthesiscited by 25
- 2016PrivTree: A Differentially Private Algorithm for Hierarchical Decompositionscited by 22
- 2024"What do you want from theory alone?" Experimenting with Tight Auditing of Differentially Private Synthetic Data Generationcited by 21
- 2023Practical Differentially Private Hyperparameter Tuning with Subsamplingcited by 19
- 2023Generating Private Synthetic Data with Genetic Algorithmscited by 18
- 2024Differentially Private Release of Israel's National Registry of Live Birthscited by 17
- 2023Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utilitycited by 13
- 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 13
- 2022dpart: Differentially Private Autoregressive Tabular, a General Framework for Synthetic Data Generationcited by 12
- 2023Synthetic Data: Methods, Use Cases, and Riskscited by 10
- 2024Privacy Vulnerabilities in Marginals-based Synthetic Datacited by 10
- 2015Principled Evaluation of Differentially Private Algorithms using DPBenchcited by 6
- 2023Generating tabular datasets under differential privacycited by 6
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generationcited by 3
- 2026Tight Auditing of Differential Privacy in MST and AIMcited by 1
- 2025Understanding the Impact of Data Domain Extraction on Synthetic Data Privacycited by 0
- 2026Evaluating LLM Simulators as Differentially Private Data Generatorscited by 0
- 2026Tight End-to-End Accounting for Differentially Private Synthetic Datacited by 0
- 2026Tight End-to-End Accounting for Differentially Private Synthetic Data12 Oct 2026
- 2026Tight Auditing of Differential Privacy in MST and AIM20 Apr 2026
- 2026Evaluating LLM Simulators as Differentially Private Data Generators16 Apr 2026
- 2025dpmm: Differentially Private Marginal Models, a Library for Synthetic Tabular Data Generation31 May 2025
- 2025Understanding the Impact of Data Domain Extraction on Synthetic Data Privacy11 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2026Differentially Private Synthetic Data via APIs 4: Tabular Data
- 2024Leveraging Programmatically Generated Synthetic Data for Differentially Private Diffusion Training
- 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model
- 2025DP-GENG : Differentially Private Dataset Distillation Guided by DP-Generated Data ↗
- 2024Differentially Private Tabular Data Synthesis using Large Language Models
- 2025Privacy Preserving Diffusion Models for Mixed-Type Tabular Data Generation
- 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model
- 2022Differentially Private Diffusion Models