mlsanityData to 14 Oct 2026

What is the Cost of Differential Privacy for Deep Learning-Based Trajectory Generation?

arXiv 2506.09312 ↗First posted 11 Jun 2025cs.CR cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

While location trajectories offer valuable insights, they also reveal sensitive personal information. Differential Privacy (DP) offers formal protection, but achieving a favourable utility-privacy trade-off remains challenging. Recent works explore deep learning-based generative models to produce synthetic trajectories. However, current models lack formal privacy guarantees and rely on conditional information derived from real data during generation. This work investigates the utility cost of enforcing DP in such models, addressing three research questions across two datasets and eleven utility metrics. (1) We evaluate how DP-SGD, the standard DP training method for deep learning, affects the utility of state-of-the-art generative models. (2) Since DP-SGD is limited to unconditional models, we propose a novel DP mechanism for conditional generation that provides formal guarantees and assess its impact on utility. (3) We analyse how model types - Diffusion, VAE, and GAN - affect the utility-privacy trade-off. Our results show that DP-SGD significantly impacts performance, although some utility remains if the datasets is sufficiently large. The proposed DP mechanism improves training stability, particularly when combined with DP-SGD, for unstable models such as GANs and on smaller datasets. Diffusion models yield the best utility without guarantees, but with DP-SGD, GANs perform best, indicating that the best non-private model is not necessarily optimal when targeting formal guarantees. In conclusion, DP trajectory generation remains a challenging task, and formal guarantees are currently only feasible with large datasets and in constrained use cases.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 27 of its 58 references that are in the map. First posted on arXiv 11 Jun 2025.

Builds on

27 of 58 references.

References · 27

  1. 2017Attention Is All You Needcited by 60,361
  2. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  3. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  5. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
  6. 2022Generative Adversarial Networkscited by 5,627
  7. 2016Deep Learning with Differential Privacycited by 2,728
  8. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  9. 2021Opacus: User-Friendly Differential Privacy Library in PyTorchcited by 383
  10. 2014RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Responsecited by 272
  11. 2018Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergencescited by 242
  12. 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 218
15 more
  1. 2021Numerical Composition of Differential Privacycited by 180
  2. 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
  3. 2023Membership Inference Attacks against Diffusion Modelscited by 86
  4. 2017On the regularization of Wasserstein GANscited by 65
  5. 2023DiffTraj: Generating GPS Trajectory with Diffusion Probabilistic Modelcited by 65
  6. 2020LSTM-TrajGAN: A Deep Learning Approach to Trajectory Privacy Protectioncited by 57
  7. 2024Diff-RNTraj: A Structure-aware Diffusion Model for Road Network-constrained Trajectory Generationcited by 29
  8. 2022PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Modelcited by 13
  9. 2018The Long Road to Computational Location Privacy: A Surveycited by 10
  10. 2022GeoPointGAN: Synthetic Spatial Data with Local Label Differential Privacycited by 9
  11. 2022Reconstruction Attack on Differential Private Trajectory Protection Mechanismscited by 7
  12. 2024SoK: Can Trajectory Generation Combine Privacy and Utility?cited by 6
  13. 2024Generative Models for Synthetic Urban Mobility Data: A Systematic Literature Reviewcited by 5
  14. 2024Map2Traj: Street Map Piloted Zero-shot Trajectory Generation with Diffusion Modelcited by 2
  15. 2022Directional Privacy for Deep Learningcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Privacy Evaluation of Generative Models for Trajectory Generation
  2. 2026A Dual Perspective on Synthetic Trajectory Generators: Utility Framework and Privacy Vulnerabilities
  3. 2024Differentially Private Fine-Tuning of Diffusion Models
  4. 2022Differentially Private Diffusion Models
  5. 2023Discriminative Adversarial Privacy: Balancing Accuracy and Membership Privacy in Neural Networks
  6. 2024DP-TLDM: Differentially Private Tabular Latent Diffusion Model
  7. 2025DP-GENG : Differentially Private Dataset Distillation Guided by DP-Generated Data ↗
  8. 2025On the MIA Vulnerability Gap Between Private GANs and Diffusion Models