mlsanityData to 14 Oct 2026

The Importance of Being Discrete: Measuring the Impact of Discretization in End-to-End Differentially Private Synthetic Data

arXiv 2504.06923 ↗First posted 9 Apr 2025cs.CR cs.LGcited by 5

Not on the map. Why?

Abstract (arXiv)

Differentially Private (DP) generative marginal models are often used in the wild to release synthetic tabular datasets in lieu of sensitive data while providing formal privacy guarantees. These models approximate low-dimensional marginals or query workloads; crucially, they require the training data to be pre-discretized, i.e., continuous values need to first be partitioned into bins. However, as the range of values (or their domain) is often inferred directly from the training data, with the number of bins and bin edges typically defined arbitrarily, this approach can ultimately break end-to-end DP guarantees and may not always yield optimal utility. In this paper, we present an extensive measurement study of four discretization strategies in the context of DP marginal generative models. More precisely, we design DP versions of three discretizers (uniform, quantile, and k-means) and reimplement the PrivTree algorithm. We find that optimizing both the choice of discretizer and bin count can improve utility, on average, by almost 30% across six DP marginal models, compared to the default strategy and number of bins, with PrivTree being the best-performing discretizer in the majority of cases. We demonstrate that, while DP generative models with non-private discretization remain vulnerable to membership inference attacks, applying DP during discretization effectively mitigates this risk. Finally, we improve on an existing approach for automatically selecting the optimal number of bins, and achieve high utility while reducing both privacy budget consumption and computational overhead.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 33 of its 112 references that are in the map. First posted on arXiv 9 Apr 2025.

Builds on

33 of 112 references.

References · 33

  1. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  2. 2018Differentially Private Generative Adversarial Networkcited by 235
  3. 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
  4. 2021Winning the NIST Contest: A scalable and general approach to differentially private synthetic datacited by 102
  5. 2022AIM: An Adaptive and Iterative Mechanism for Differentially Private Synthetic Datacited by 90
  6. 2021Benchmarking Differentially Private Synthetic Data Generation Algorithmscited by 81
  7. 2019Graphical-model based estimation and inference for differential privacycited by 74
  8. 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 59
  9. 2022TAPAS: a Toolbox for Adversarial Privacy Auditing of Synthetic Datacited by 57
  10. 2019G-PATE: Scalable Differentially Private Data Generator via Private Aggregation of Teacher Discriminatorscited by 53
  11. 2019Diffprivlib: The IBM Differential Privacy Librarycited by 53
  12. 2021Differentially Private Query Release Through Adaptive Projectioncited by 52
21 more
  1. 2018FIRST: A Framework for Optimizing Information Quality in Mobile Crowdsensing Systemscited by 50
  2. 2020New Oracle-Efficient Algorithms for Private Synthetic Data Releasecited by 43
  3. 2017Differentially Private Mixture of Generative Neural Networkscited by 39
  4. 2023SoK: Privacy-Preserving Data Synthesiscited by 38
  5. 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
  6. 2018Optimizing error of high-dimensional statistical queries under differential privacycited by 29
  7. 2023Achilles' Heels: Vulnerable Record Identification in Synthetic Data Publishingcited by 28
  8. 2015Differentially Private k-Means Clusteringcited by 27
  9. 2020Kamino: Constraint-Aware Differentially Private Data Synthesiscited by 25
  10. 2016PrivTree: A Differentially Private Algorithm for Hierarchical Decompositionscited by 22
  11. 2024"What do you want from theory alone?" Experimenting with Tight Auditing of Differentially Private Synthetic Data Generationcited by 21
  12. 2023Practical Differentially Private Hyperparameter Tuning with Subsamplingcited by 19
  13. 2023Generating Private Synthetic Data with Genetic Algorithmscited by 18
  14. 2024Differentially Private Release of Israel's National Registry of Live Birthscited by 17
  15. 2023Graphical vs. Deep Generative Models: Measuring the Impact of Differentially Private Mechanisms and Budgets on Utilitycited by 13
  16. 2024The Elusive Pursuit of Reproducing PATE-GAN: Benchmarking, Auditing, Debuggingcited by 13
  17. 2022dpart: Differentially Private Autoregressive Tabular, a General Framework for Synthetic Data Generationcited by 12
  18. 2023Synthetic Data: Methods, Use Cases, and Riskscited by 10
  19. 2024Privacy Vulnerabilities in Marginals-based Synthetic Datacited by 10
  20. 2015Principled Evaluation of Differentially Private Algorithms using DPBenchcited by 6
  21. 2023Generating tabular datasets under differential privacycited by 6

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 3.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Differentially Private Synthetic Data via APIs 4: Tabular Data
  2. 2024Leveraging Programmatically Generated Synthetic Data for Differentially Private Diffusion Training
  3. 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model
  4. 2025DP-GENG : Differentially Private Dataset Distillation Guided by DP-Generated Data ↗
  5. 2024Differentially Private Tabular Data Synthesis using Large Language Models
  6. 2025Privacy Preserving Diffusion Models for Mixed-Type Tabular Data Generation
  7. 2025Differentially Private Synthetic Data via APIs 3: Using Simulators Instead of Foundation Model
  8. 2022Differentially Private Diffusion Models