Auditing Cross-Lingual Fairness in Language Model Watermarking
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Watermarking schemes for large language model output are evaluated almost exclusively on English text using each scheme's detection threshold and a narrow set of quality measurements. Multilingual deployment exposes evaluation-design choices that are inconsequential on English but determine conclusions cross-lingually. We propose an evaluation framework with four components: detection thresholds calibrated empirically per deployment context, a threshold-independent companion measurement that distinguishes calibration failures from detection failures, three disjoint quality measurement paradigms (distributional, paired-semantic, and reference-perplexity), and a generalized-entropy decomposition of cross-language disparity over a typological family partition. Applied to six watermarking schemes, three open-weight generators, eleven languages spanning four scripts and eight typological families, and both base and instruction-tuned regimes, the framework reveals failure modes that single-language single-paradigm evaluation cannot surface. Across detection and quality, observed disparity is predominantly between-family on the typological partition, indicating that cross-lingual fairness gaps in watermarking are structural to language properties rather than idiosyncratic to particular languages.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 21 of its 27 references that are in the map. First posted on arXiv 20 Aug 2026.
Builds on
21 of 27 references.
Closest ancestors · 11
Same direction, newest first
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr
- 2025Watermarking Without Standards Is Not AI Governance27 May
- 2024Watermark under Fire: A Robustness Evaluation of LLM Watermarking20 Nov
- 2024Topic-Based Watermarks for Large Language Models2 Apr
- 2024Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models21 Feb
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023A Watermark for Large Language Models24 Jan
Other references · 10
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2016Equality of Opportunity in Supervised Learningcited by 2,007
- 2020The State and Fate of Linguistic Diversity and Inclusion in the NLP Worldcited by 798
- 2014Certifying and removing disparate impactcited by 715
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 470
- 2023Combating Misinformation in the Age of LLMs: Opportunities and Challengescited by 95
- 2023AI model GPT-3 (dis)informs us better than humanscited by 78
- 2023GlotLID: Language Identification for Low-Resource Languagescited by 39
- 2025Optimal Watermark Generation under Type I and Type II Errorscited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation
- 2023Unbiased Watermark for Large Language Models
- 2026Linguistics-Aware Non-Distortionary LLM Watermarking
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology
- 2023Three Bricks to Consolidate Watermarks for Large Language Models
- 2025Cross-Lingual Summarization as a Black-Box Watermark Removal Attack
- 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation