SOURCE-LINKED INTELLIGENCE

Subgroup Membership Inference Audits of Differentially Private Synthetic Text

arXiv · AI, language, vision and robotics · article · Sep 9, 2026 · UTC

Synthetic data releases are increasingly proposed in the literature as a means of sharing realistic data replicas in lieu of sensitive private datasets. Even when the worst-case privacy leakage of such releases is bounded by means of differential privacy (DP), in practice a residual risk remains. Membership inference attack (MIA) audits are conducted to empirically quantify this risk. However, existing methods only measure average-case risk for randomly drawn records, which might conceal the risk to vulnerable subgroups. To highlight this issue, we define a subgroup-targeted membership inferen

Read original source ↗ Open in workspace

recordType

paper

region

Global