mlsanityData to 14 Oct 2026

RL-Finetuned LLMs for Privacy-Preserving Synthetic Rewriting

arXiv 2508.19286 ↗First posted 25 Aug 2025cs.CR cs.AI cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

The performance of modern machine learning systems depends on access to large, high-quality datasets, often sourced from user-generated content or proprietary, domain-specific corpora. However, these rich datasets inherently contain sensitive personal information, raising significant concerns about privacy, data security, and compliance with regulatory frameworks. While conventional anonymization techniques can remove explicit identifiers, such removal may result in performance drop in downstream machine learning tasks. More importantly, simple anonymization may not be effective against inference attacks that exploit implicit signals such as writing style, topical focus, or demographic cues, highlighting the need for more robust privacy safeguards during model training. To address the challenging issue of balancing user privacy and data utility, we propose a reinforcement learning framework that fine-tunes a large language model (LLM) using a composite reward function that jointly optimizes for explicit and implicit privacy, semantic fidelity, and output diversity. To effectively capture population level regularities, the privacy reward combines semantic cues with structural patterns derived from a minimum spanning tree (MST) over latent representations. By modeling these privacy-sensitive signals in their distributional context, the proposed approach guides the model to generate synthetic rewrites that preserve utility while mitigating privacy risks. Empirical results show that the proposed method significantly enhances author obfuscation and privacy metrics without degrading semantic quality, providing a scalable and model-agnostic solution for privacy preserving data generation in the era of large language models.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 30 of its 38 references that are in the map. First posted on arXiv 25 Aug 2025.

Builds on

30 of 38 references.

References · 30

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  2. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  5. 2016Deep Learning with Differential Privacycited by 2,728
  6. 2020Extracting Training Data from Large Language Modelscited by 2,189
  7. 2019ERASER: A Benchmark to Evaluate Rationalized NLP Modelscited by 530
  8. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
  9. 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 345
  10. 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 285
  11. 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 175
  12. 2022Same Author or Just Same Topic? Towards Content-Independent Style Representationscited by 86
18 more
  1. 2022Differentially Private Language Models for Secure Data Sharingcited by 68
  2. 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
  3. 2018Generalised Differential Privacy for Text Document Processingcited by 52
  4. 2024A Synthetic Dataset for Personal Attribute Inferencecited by 36
  5. 2024StyleDistance: Stronger Content-Independent Style Embeddings with Synthetic Parallel Examplescited by 35
  6. 2021Privacy Regularization: Joint Privacy-Utility Optimization in Language Modelscited by 30
  7. 2023DP-BART for Privatized Text Rewriting under Local Differential Privacycited by 28
  8. 2022Adversarial Robustness of Neural-Statistical Features in Detection of Generative Transformerscited by 25
  9. 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Modelscited by 24
  10. 2025Measuring Data Diversity for Instruction Tuning: A Systematic Analysis and A Reliable Metriccited by 24
  11. 2024StyleRemix: Interpretable Authorship Obfuscation via Distillation and Perturbation of Style Elementscited by 18
  12. 2017The Case for Being Average: A Mediocrity Approach to Style Masking and Author Obfuscationcited by 15
  13. 2025R.R.: Unveiling LLM Training Privacy through Recollection and Rankingcited by 10
  14. 2024Just Rewrite It Again: A Post-Processing Method for Enhanced Semantic Similarity and Privacy Preservation of Differentially Private Rewritten Textcited by 9
  15. 2024A Multi-Faceted Evaluation Framework for Assessing Synthetic Data Generated by Large Language Modelscited by 8
  16. 2024Casper: Prompt Sanitization for Protecting User Privacy in Web-Based Large Language Modelscited by 8
  17. 2024ALISON: Fast and Effective Stylometric Authorship Obfuscationcited by 5
  18. 2024Granularity is crucial when applying differential privacy to text: An investigation for neural machine translationcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025RewardDS: Privacy-Preserving Fine-Tuning for Large Language Models via Reward Driven Data Synthesis
  2. 2024Privacy-Preserving Instructions for Aligning Large Language Models
  3. 2025Privacy-R1: Privacy-Aware Multi-LLM Agent Collaboration via Reinforcement Learning
  4. 2024Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions
  5. 2025Efficient Differentially Private Fine-Tuning of LLMs via Reinforcement Learning
  6. 2024Preserving Privacy in Large Language Models: A Survey on Current Threats and Solutions
  7. 2024Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data
  8. 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directions