ContinuousBench: Can Differentially Private Synthetic Text Improve Capabilities?
Not on the map. Why?
Abstract (arXiv)
Differentially private (DP) text synthesis promises to unlock sensitive corpora for model training, but it remains unclear whether DP synthetic data transmits genuinely new knowledge and capabilities present only in those corpora. This is because existing evaluations rely on tasks that are nearly solvable without training, so strong benchmark performance does not establish that DP synthesis can substitute original data access. Thus, we introduce ContinuousBench, a continuously and automatically-regenerated benchmark that measures capability gain from DP synthetic text. Each quarter, a new release pairs a never-before-seen training corpus with a derived QA set, constructed to be: (1) unsolvable sans-corpus; and (2) learnable under DP, as the tested knowledge is supported by hundreds of independent records. Researchers produce DP synthetic data from the training corpus and run our standardized training and evaluation harness on their synthetic data to measure gains. We instantiate two tracks: Geminon, a procedurally-generated dataset about fictional creatures; and News, a stream of newly crawled public news articles. Although standard benchmarks are nearly saturated, on ContinuousBench we find that non-private synthesis transfers substantial knowledge from the original corpus, while state-of-the-art DP synthesis methods generally fail to do so, even at varepsilon=100.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 47 of its 54 references that are in the map. First posted on arXiv 1 Jun 2026.
Builds on
47 of 54 references.
References · 47
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2016Deep Learning with Differential Privacycited by 2,682
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2020Aligning AI With Shared Human Valuescited by 706
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 466
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2024DataComp-LM: In search of the next generation of training sets for language modelscited by 381
- 2023FreshLLMs: Refreshing Large Language Models with Search Engine Augmentationcited by 308
- 2023Physics of Language Models: Part 3.1, Knowledge Storage and Extractioncited by 264
35 more
- 2022Unlocking High-Accuracy Differentially Private Image Classification through Scalecited by 218
- 2024WildBench: Benchmarking LLMs with Challenging Tasks from Real Users in the Wildcited by 211
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 150
- 2022StreamingQA: A Benchmark for Adaptation to New Knowledge over Time in Question Answering Modelscited by 123
- 2021Large-Scale Differentially Private BERTcited by 117
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 112
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
- 2024Differentially Private Synthetic Data via Foundation Model APIs 2: Textcited by 74
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2024Instruction Pre-Training: Language Models are Supervised Multitask Learnerscited by 63
- 2024Synthetic continued pretrainingcited by 56
- 2022TAN Without a Burn: Scaling Laws of DP-SGDcited by 51
- 2024AntiLeakBench: Preventing Data Contamination by Automatically Constructing Benchmarks with Updated Real-World Knowledgecited by 42
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2024Private prediction for large-scale synthetic text generationcited by 24
- 2025Scaling Laws for Differentially Private Language Modelscited by 22
- 2024Scalable DP-SGD: Shuffling vs. Poisson Subsamplingcited by 16
- 2025Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMscited by 15
- 2025Benchmarking Differentially Private Tabular Data Synthesiscited by 13
- 2024Evaluating Differentially Private Synthetic Data Generation in High-Stakes Domainscited by 12
- 2025Contrastive Private Data Synthesis via Weighted Multi-PLM Fusioncited by 11
- 2025DPImageBench: A Unified Benchmark for Differentially Private Image Synthesiscited by 11
- 2025Knowledge-Instruct: Effective Continual Pre-training from Limited Data using Instructionscited by 11
- 2022Can Foundation Models Help Us Achieve Perfect Secrecy?cited by 9
- 2025From Style to Facts: Mapping the Boundaries of Knowledge Injection with Finetuningcited by 7
- 2025Struct-Bench: A Benchmark for Differentially Private Structured Text Generationcited by 7
- 2025Tighter Privacy Analysis for Truncated Poisson Samplingcited by 5
- 2025Evaluating Differentially Private Generation of Domain-Specific Textcited by 5
- 2025PCEvolve: Private Contrastive Evolution for Synthetic Dataset Generation via Few-Shot Private Data and Generative APIscited by 4
- 2025SynBench: A Benchmark for Differentially Private Text Generationcited by 4
- 2025Private Evolution Convergescited by 2
- 2026JAX-Privacy: A library for differentially private machine learningcited by 2
- 2026EPSVec: Efficient and Private Synthetic Data Generation via Dataset Vectorscited by 2
- 2025Privacy-Preserving Generation of Clinical Narratives from Medical Terminologiescited by 1
Built on by
Not cited yet.