Improved Algorithms for Differentially Private Language Model Alignment
On the map: LLM alignment / RLHF / preference optimisation → Human values and AI feedback alignment
Abstract (arXiv)
Language model alignment is crucial for ensuring that large language models (LLMs) align with human preferences, yet it often involves sensitive user data, raising significant privacy concerns. While prior work has integrated differential privacy (DP) with alignment techniques, their performance remains limited. In this paper, we propose novel algorithms for privacy-preserving alignment and rigorously analyze their effectiveness across varying privacy budgets and models. Our framework can be deployed on two celebrated alignment techniques, namely direct preference optimization (DPO) and reinforcement learning from human feedback (RLHF). Through systematic experiments on large-scale language models, we demonstrate that our approach achieves state-of-the-art performance. Notably, one of our algorithms, DP-AdamW, combined with DPO, surpasses existing methods, improving alignment quality by up to 15% under moderate privacy budgets (ε=2-5). We further investigate the interplay between privacy guarantees, alignment efficacy, and computational demands, providing practical guidelines for optimizing these trade-offs.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Human values and AI feedback alignment, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 38 of its 42 references that are in the map. First posted on arXiv 13 May 2025.
Builds on
38 of 42 references.
Closest ancestors · 2
Same direction, newest first
- 2023Privately Aligning Language Models with Reinforcement Learning25 Oct
- 2020Learning to summarize from human feedback2 Sep
Other references · 36
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2016Deep Learning with Differential Privacycited by 2,682
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
24 more
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2024DeepSeek LLM: Scaling Open-Source Language Models with Longtermismcited by 621
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2023Iterative Preference Learning from Human Feedback: Bridging Theory and Practice for RLHF under KL-Constraintcited by 346
- 2021Recursively Summarizing Books with Human Feedbackcited by 287
- 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2021Towards Instance-Optimal Offline Reinforcement Learning with Pessimismcited by 78
- 2017Reinforcement Learning for Bandit Neural Machine Translation with Simulated Human Feedbackcited by 71
- 2018Can Neural Machine Translation be Improved with User Feedback?cited by 71
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2022The Limits of Word Level Differential Privacycited by 63
- 2022Privately Fine-Tuning Large Language Models with Differential Privacycited by 39
- 2023Policy Optimization in RLHF: The Impact of Out-of-preference Datacited by 35
- 2024Insights into Alignment: Evaluating DPO and its Variants Across Multiple Taskscited by 35
- 2019Privacy-preserving Q-Learning with Functional Noise in Continuous State Spacescited by 29
- 2023DP-AdamBC: Your DP-Adam Is Actually DP-SGD (Unless You Apply Bias Correction)cited by 28
- 2024Fine-Tuning Large Language Models with User-Level Differential Privacycited by 28
- 2020Riemannian Langevin Algorithm for Solving Semidefinite Programscited by 22
- 2023Differentially Private Natural Language Models: Recent Advances and Future Directionscited by 20
- 2016Differentially Private Policy Evaluationcited by 19
- 2022Privacy Leakage in Text Classification: A Data Extraction Approachcited by 9
- 2023DP-Adam: Correcting DP Bias in Adam's Second Moment Estimationcited by 8
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025PROPS: Progressively Private Self-alignment of Large Language Models
- 2026Differentially Private Preference Data Synthesis for Large Language Model Alignment
- 2026Private Direct Preference Optimization for LLM Alignment
- 2025Improved Bounds for Private and Robust Alignment
- 2025Differentially Private Steering for Large Language Model Alignment
- 2025SquarechiPO: Differentially Private and Robust chi2-Preference Optimization in Offline Direct Alignment
- 2024Privacy-Preserving Instructions for Aligning Large Language Models
- 2024Exposing Privacy Gaps: Membership Inference Attack on Preference Data for LLM Alignment