Lune

ACL Findings2023

A Customized Text Sanitization Mechanism with Differential Privacy

Sai Chen, Fengran Mo, Yanhao Wang, Cen Chen, Jian-Yun Nie, Chengyu Wang, Jamie Cui

Abstract

As privacy issues are receiving increasing attention within the Natural Language Processing (NLP) community, numerous methods have been proposed to sanitize texts subject to differential privacy. However, the state-of-theart text sanitization mechanisms based on metric local differential privacy (MLDP) do not apply to non-metric semantic similarity measures and cannot achieve good trade-offs between privacy and utility. To address the above limitations, we propose a novel Customized Text (CusText) sanitization mechanism based on the original ϵ-differential privacy (DP) definition, which is compatible with any similarity measure. Furthermore, CusText assigns each input token a customized output set of tokens to provide more advanced privacy protection at the token level. Extensive experiments on several benchmark datasets show that CusText achieves a better trade-off between privacy and utility than existing mechanisms. The code is available at https://github. com/sai4july/CusText.

Ask Lune

Ask anything. The answer quotes the paper.

Lune reads all of it and the papers around it, then shows you the passages behind every answer.

Questions to start from

Lune answers from

the full paper · 12 top-tier papers that cite it · related work

Get the answer

Free to start. No credit card required.

Cited by top-tier papers12

  1. ConSiDERS-The-Human Evaluation Framework: Rethinking Human Evaluation for Generative Large Language ModelsAparna Elangovan, Ling Liu, Lei Xu, Sravan Babu Bodapati et al.ACL 2024 · 19 citations
  2. Portcullis: A Scalable and Verifiable Privacy Gateway for Third-Party LLM InferenceJiangou Zhan, Wenhui Zhang, Zheng Zhang, Huanran Xue et al.AAAI 2025 · 10 citations
  3. DP-Fusion: Token-Level Differentially Private Inference for Large Language ModelsRushil Thareja, Preslav Nakov, Praneeth Vepakomma, Nils LukasICLR 2026 · 7 citations
  4. Prεεmpt: Sanitizing Sensitive Prompts for LLMsAmrita Roy Chowdhury, David Glukhov, Divyam Anshumaan, Prasad Chalasani et al.NDSS 2026 · 5 citations
  5. ObfusLM: Privacy-preserving Language Model Service against Embedding Inversion AttacksYu Lin, Ruining Yang, Yunlong Mao, Qizhi Zhang et al.ACL 2025 · 2 citations

Builds on8

  1. Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan et al.CCS 2016 · 7,620 citations
  2. The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural NetworksNicholas Carlini, Chang Liu, Úlfar Erlingsson, Jernej Kos et al.USENIX Security 2019 · 1,386 citations
  3. Large Language Models Can Be Strong Differentially Private LearnersXuechen Li, Florian Tramèr, Percy Liang, Tatsunori HashimotoICLR 2022 · 502 citations
  4. Information Leakage in Embedding ModelsCongzheng Song, Ananth RaghunathanCCS 2020 · 200 citations
  5. Utility-Optimized Local Differential Privacy Mechanisms for Distribution EstimationTakao Murakami, Yusuke KawamotoUSENIX Security 2019 · 111 citations

Related papers

  1. Differential Privacy for Text Analytics via Natural Text SanitizationXiang Yue, Minxin Du, Tianhao Wang, Yaliang Li et al.ACL Findings 2021 · 56 citations
  2. DYNTEXT: Semantic-Aware Dynamic Text Sanitization for Privacy-Preserving LLM InferenceJuhua Zhang, Zhiliang Tian, Minghang Zhu, Yiping Song et al.ACL Findings 2025 · 6 citations
  3. Sanitizing Sentence Embeddings (and Labels) for Local Differential PrivacyMinxin Du, Xiang Yue, Sherman S. M. Chow, Huan SunWWW 2023 · 26 citations
  4. DP-MLM: Differentially Private Text Rewriting Using Masked Language ModelsStephen Meisenbacher, Maulik Chevli, Juraj Vladika, Florian MatthesACL Findings 2024 · 9 citations
  5. Leveraging Semantic Triples for Private Document Generation with Local Differential Privacy GuaranteesStephen Meisenbacher, Maulik Chevli, Florian MatthesEMNLP 2025
Dusk over the sea between two cliffs drawn in fine vertical lines