PrivacySecurityTrustworthinesscs.CR
Differential Privacy in Machine Learning: A Survey from Symbolic AI to LLMs
Francisco Aguilera-Martínez, Fernando Berzal
June 13, 2025
ACM Transactions on Intelligent Systems and Technology
4 citations
Key Takeaways
-
Differential privacy offers a mathematical guarantee that individual data points won't be exposed: Unlike traditional anonymization approaches, differential privacy provides formal, quantifiable protection by ensuring that whether or not any single person's data is included in training doesn't significantly change what a model outputs—making it mathematically difficult to reverse-engineer someone's private information from the model.
-
Privacy protection has evolved across different AI systems, from traditional machine learning to large language models: The survey traces how differential privacy techniques have been adapted and applied across the entire spectrum of AI development, indicating that privacy considerations are increasingly being integrated into modern systems like LLMs, not just older symbolic AI approaches.
-
There's a practical framework for evaluating whether privacy-preserving ML actually works in real-world applications: The paper emphasizes that differential privacy isn't just theoretical—it includes methods to test and measure whether privacy protections are genuinely effective when deployed, which is essential for building trustworthy AI systems.
-
Privacy protection in machine learning requires balancing multiple competing goals: The integration of differential privacy into ML models involves tradeoffs that practitioners must navigate, suggesting that responsible AI development requires thoughtful decisions about how much privacy protection to implement versus other performance considerations.