RAPID: Risk of Attribute Prediction-Induced Disclosure in Synthetic Microdata
Not on the map. Why?
Abstract (arXiv)
Statistical data anonymization increasingly relies on fully synthetic microdata, for which classical identity disclosure measures are less informative than an adversary's ability to infer sensitive attributes from released data. We introduce RAPID (Risk of Attribute Prediction--Induced Disclosure), a disclosure risk measure that directly quantifies inferential vulnerability under a realistic attack model. An adversary trains a predictive model solely on the released synthetic data and applies it to real individuals' quasi-identifiers. For continuous sensitive attributes, RAPID reports the proportion of records whose predicted values fall within a specified relative error tolerance. For categorical attributes, we propose a baseline-normalized confidence score that measures how much more confident the attacker is about the true class than would be expected from class prevalence alone, and we summarize risk as the fraction of records exceeding a policy-defined threshold. This construction yields an interpretable, bounded risk metric that is robust to class imbalance, independent of any specific synthesizer, and applicable with arbitrary learning algorithms. We illustrate threshold calibration, uncertainty quantification, and comparative evaluation of synthetic data generators using simulations and real data. Our results show that RAPID provides a practical, attacker-realistic upper bound on attribute-inference disclosure risk that complements existing utility diagnostics and disclosure control frameworks.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 9 of its 38 references that are in the map. First posted on arXiv 9 Feb 2026.
Builds on
9 of 38 references.
References · 9
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,166
- 2015ranger: A Fast Implementation of Random Forests for High Dimensional Data in C++ and Rcited by 172
- 2022A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learningcited by 27
- 2020The Limits of Differential Privacy (and its Misuse in Data Release and Machine Learning)cited by 22
- 2023Database Reconstruction Is Not So Easy and Is Different from Reidentificationcited by 4
- 2025Ensembling Membership Inference Attacks Against Tabular Generative Modelscited by 4
- 2023When Machine Learning Models Leak: An Exploration of Synthetic Training Datacited by 1
- 2024Escalation of Commitment: A Case Study of the United States Census Bureau Efforts to Implement Differential Privacy for the 2020 Decennial Censuscited by 1
- 2025Beyond the Trade-off Curve: Multivariate and Advanced Risk-Utility Maps for Evaluating Anonymized and Synthetic Datacited by 1
Built on by
Not cited yet.