Privacy Preserving In-Context-Learning Framework for Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) have significantly transformed natural language understanding and generation, but they raise privacy concerns due to potential exposure of sensitive information. Studies have highlighted the risk of information leakage, where adversaries can extract sensitive information embedded in the prompts. In this work, we introduce a novel private prediction framework for generating high-quality synthetic text with strong privacy guarantees. Our approach leverages the Differential Privacy (DP) framework to ensure worst-case theoretical bounds on information leakage without requiring any fine-tuning of the underlying models. The proposed method performs inference on private records and aggregates the resulting per-token output distributions. This enables the generation of longer and coherent synthetic text while maintaining privacy guarantees. Additionally, we propose a simple blending operation that combines private and public inference to further enhance utility. Empirical evaluations demonstrate that our approach outperforms previous state-of-the-art methods on in-context-learning (ICL) tasks, making it a promising direction for privacy-preserving text generation while maintaining high utility. Our code is available at https://github.com/bhusalb/privacy-preserving-icl.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 29 of its 44 references that are in the map. First posted on arXiv 17 Sep 2025.
Builds on
29 of 44 references.
References · 29
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
- 2022A Survey on In-context Learningcited by 717
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 347
- 2018Scalable Private Learning with PATEcited by 266
- 2014RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Responsecited by 262
- 2024The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)cited by 159
17 more
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2023Privacy-Preserving In-Context Learning with Differentially Private Few-Shot Generationcited by 94
- 2024Differentially Private Synthetic Data via Foundation Model APIs 2: Textcited by 74
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2022The Limits of Word Level Differential Privacycited by 63
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 56
- 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
- 2018Privacy-preserving Predictioncited by 48
- 2021TEM: High Utility Metric Differential Privacy on Textcited by 43
- 2020A Differentially Private Text Perturbation Method Using a Regularized Mahalanobis Metriccited by 41
- 2022Submix: Practical Private Prediction for Large-Scale Language Modelscited by 31
- 2022A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learningcited by 27
- 2024Private prediction for large-scale synthetic text generationcited by 24
- 2020The Trade-Offs of Private Predictioncited by 22
- 2024Prompt Public Large Language Models to Synthesize Data for Private On-device Applicationscited by 17
Built on by
Citing papers per year: 2026: 2.
2 papers.