Assessing and Mitigating Data Memorization Risks in Fine-Tuned Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have demonstrated remarkable capabilities across diverse natural language processing tasks, but their tendency to memorize training data poses significant privacy risks, particularly during fine-tuning processes. This paper presents a comprehensive empirical analysis of data memorization in fine-tuned LLMs and introduces a novel multi-layered privacy protection framework. Through controlled experiments on modern LLM architectures including GPT-2, Phi-3, and Gemma-2, we demonstrate that fine-tuning with repeated sensitive data increases privacy leakage rates from baseline levels of 0-5% to 60-75%, representing a 64.2% average increase across tested models. We propose and rigorously evaluate four complementary privacy protection methods: semantic data deduplication, differential privacy during generation, entropy-based filtering, and pattern-based content filtering. Our experimental results show that these techniques can reduce data leakage to 0% while maintaining 94.7% of original model utility.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 14 of its 20 references that are in the map. First posted on arXiv 10 Aug 2025.
Builds on
14 of 20 references.
References · 14
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2016Deep Learning with Differential Privacycited by 2,728
- 2022Emergent Abilities of Large Language Modelscited by 2,512
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2021Deduplicating Training Data Makes Language Models Bettercited by 714
- 2022Large Language Models Can Self-Improvecited by 664
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
2 more
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.