Trade-offs in Data Memorization via Strong Data Processing Inequalities
Not on the map. Why?
Abstract (arXiv)
Recent research demonstrated that training large language models involves memorization of a significant fraction of training data. Such memorization can lead to privacy violations when training on sensitive user data and thus motivates the study of data memorization's role in learning. In this work, we develop a general approach for proving lower bounds on excess data memorization, that relies on a new connection between strong data processing inequalities and data memorization. We then demonstrate that several simple and natural binary classification problems exhibit a trade-off between the number of samples available to a learning algorithm, and the amount of information about the training data that a learning algorithm needs to memorize to be accurate. In particular, Omega(d) bits of information about the training data need to be memorized when O(1) d-dimensional examples are available, which then decays as the number of examples grows at a problem-specific rate. Further, our lower bounds are generally matched (up to logarithmic factors) by simple learning algorithms. We also extend our lower bounds to more general mixture-of-clusters models. Our definitions and results build on the work of Brown et al. (2021) and address several limitations of the lower bounds in their work.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 24 of its 47 references that are in the map. First posted on arXiv 2 Jun 2025.
Builds on
24 of 47 references.
References · 24
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2016Understanding deep learning requires rethinking generalizationcited by 1,674
- 2021Membership Inference Attacks From First Principlescited by 878
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2023Extracting Training Data from Diffusion Modelscited by 732
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
- 2017Information-theoretic analysis of generalization capability of learning algorithmscited by 303
- 2013The Composition Theorem for Differential Privacycited by 297
- 2019Visualizing and Measuring the Geometry of BERTcited by 216
- 2020Reasoning About Generalization via Conditional Mutual Informationcited by 147
12 more
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2019Tightening Mutual Information Based Bounds on Generalization Errorcited by 117
- 2020When is Memorization of Irrelevant Training Data Necessary for High-Accuracy Learning?cited by 104
- 2015How much does your data exploration overfit? Controlling bias via information usagecited by 95
- 2015Generalization in Adaptive Data Analysis and Holdout Reusecited by 83
- 2019Overparameterized Neural Networks Implement Associative Memorycited by 45
- 2019Identity Crisis: Memorization and Generalization under Extreme Overparameterizationcited by 33
- 2017Calibrating Noise to Variance in Adaptive Data Analysiscited by 29
- 2020A Limitation of the PAC-Bayes Frameworkcited by 25
- 2023Information Theoretic Lower Bounds for Information Theoretic Upper Boundscited by 17
- 2018A Direct Sum Result for the Information Complexity of Learningcited by 6
- 2019Communication Complexity of Estimating Correlationscited by 4
Built on by
Citing papers per year: 2025: 1; 2026: 5.
6 papers.
- 2025A Law of Data Reconstruction for Random Features (and Beyond)cited by 3
- 2026Cram Less to Fit More: Training Data Pruning Improves Memorization of Factscited by 3
- 2026Hallucination is a Consequence of Space-Optimality: A Rate-Distortion Theorem for Membership Testingcited by 2
- 2026Tighter Information-Theoretic Generalization Bounds via a Novel Class of Change of Measure Inequalitiescited by 0
- 2026We Should Separate Memorization from Copyrightcited by 0
- 2026An Accuracy-Information Tradeoff for Loss-Difference Conditional Mutual Informationcited by 0
- 2026An Accuracy-Information Tradeoff for Loss-Difference Conditional Mutual Information6 Oct 2026
- 2026Cram Less to Fit More: Training Data Pruning Improves Memorization of Facts9 Apr 2026
- 2026We Should Separate Memorization from Copyright9 Feb 2026
- 2026Tighter Information-Theoretic Generalization Bounds via a Novel Class of Change of Measure Inequalities8 Feb 2026
- 2026Hallucination is a Consequence of Space-Optimality: A Rate-Distortion Theorem for Membership Testing31 Jan 2026
- 2025A Law of Data Reconstruction for Random Features (and Beyond)26 Sep 2025