Interpretable and Differentially Private Predictions
Frederik Harder, Matthias Bauer, Mijung Park
Abstract
Interpretable predictions, where it is clear why a machine learning model has made a particular decision, can compromise privacy by revealing the characteristics of individual data points. This raises the central question addressed in this paper: Can models be interpretable without compromising privacy? For complex "big" data fit by correspondingly rich models, balancing privacy and explainability is particularly challenging, such that this question has remained largely unexplored. In this paper, we propose a family of simple models in the aim of approximating complex models using several locally linear maps per class to provide high classification accuracy, as well as differentially private explanations on the classification. We illustrate the usefulness of our approach on several image benchmark datasets as well as a medical dataset.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers3
- SoK: Unintended Interactions among Machine Learning Defenses and RisksVasisht Duddu, Sebastian Szyller, N. AsokanS&P 2024 · 6 citations
- Differentially Private Explanations for ClustersAmir Gilad, Tova Milo, Kathy Razmadze, Ron ZadicarioSIGMOD 2026 · 3 citations
- Perturbation-Restrained Sequential Model EditingJun-Yu Ma, Hong Wang, Hao-Xiang Xu, Zhen-Hua Ling et al.ICLR 2025
Builds on2
Related papers
- Accuracy, Interpretability, and Differential Privacy via Explainable BoostingHarsha Nori, Rich Caruana, Zhiqi Bu, Judy Hanwen Shen et al.ICML 2021 · 52 citations
- Local Feature Selection without Label or Feature Leakage for Interpretable Machine Learning PredictionsHarrie Oosterhuis, Lijun Lyu, Avishek AnandICML 2024 · 2 citations
- Reconstruction Attacks on Machine Unlearning: Simple Models are VulnerableMartin Bertran Lopez, Shuai Tang, Michael Kearns, Jamie H. Morgenstern et al.NeurIPS 2024 · 39 citations
- Bounding the Excess Risk for Linear Models Trained on Marginal-Preserving, Differentially-Private, Synthetic DataYvonne Zhou, Mingyu Liang, Ivan Brugere, Danial Dervovic et al.ICML 2024 · 3 citations
- Differentially Private Learning Needs Better Features (or Much More Data)Florian Tramèr, Dan BonehICLR 2021 · 325 citations
