mlsanityData to 14 Oct 2026

Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Search

arXiv 2509.20838 ↗First posted 25 Sep 2025cs.CLcited by 3

Not on the map. Why?

Abstract (arXiv)

The increasing adoption of large language models (LLMs) in cloud-based services has raised significant privacy concerns, as user inputs may inadvertently expose sensitive information. Existing text anonymization and de-identification techniques, such as rule-based redaction and scrubbing, often struggle to balance privacy preservation with text naturalness and utility. In this work, we propose a zero-shot, tree-search-based iterative sentence rewriting algorithm that systematically obfuscates or deletes private information while preserving coherence, relevance, and naturalness. Our method incrementally rewrites privacy-sensitive segments through a structured search guided by a reward model, enabling dynamic exploration of the rewriting space. Experiments on privacy-sensitive datasets show that our approach significantly outperforms existing baselines, achieving a superior balance between privacy protection and utility preservation.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 20 of its 33 references that are in the map. First posted on arXiv 25 Sep 2025.

Builds on

20 of 33 references.

References · 20

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  4. 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,682
  5. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  6. 2018Personalizing Dialogue Agents: I have a dog, do you have pets too?cited by 828
  7. 2024Interpretable Preferences via Multi-Objective Reward Modeling and Mixture-of-Expertscited by 376
  8. 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 285
  9. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  10. 2019Neural Legal Judgment Prediction in Englishcited by 209
  11. 2023DP-Forward: Fine-tuning and Inference on Language Models with Differential Privacy in Forward Passcited by 67
  12. 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
8 more
  1. 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
  2. 2024Generating Code World Models with Large Language Models Guided by Monte Carlo Tree Searchcited by 40
  3. 2019ER-AE: Differentially Private Text Generation for Authorship Anonymizationcited by 35
  4. 2024DP-MLM: Differentially Private Text Rewriting Using Masked Language Modelscited by 24
  5. 2024Large Language Models are Advanced Anonymizerscited by 22
  6. 2024On the Vulnerability of Text Sanitizationcited by 9
  7. 2024NAP^2: A Benchmark for Naturalness and Privacy-Preserving Text Rewriting by Learning from Humancited by 8
  8. 2024Unsupervised Text Style Transfer via LLMs and Attention Masking with Multi-way Interactionscited by 7

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023InferDPT: Privacy-Preserving Inference for Closed-box Large Language Model
  2. 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration
  3. 2024Thinking Outside of the Differential Privacy Box: A Case Study in Text Privatization with Language Model Prompting
  4. 2025Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMs
  5. 2024Keep It Private: Unsupervised Privatization of Online Text
  6. 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy
  7. 2026Privacy-Preserving RAG via Multi-Agent Semantic Rewriting: Achieving Confidentiality Without Compromising Contextual Fidelity
  8. 2025Privacy-Aware Decoding: Mitigating Privacy Leakage of Large Language Models in Retrieval-Augmented Generation