EMNLP Findings2025
Zero-Shot Privacy-Aware Text Rewriting via Iterative Tree Search
Shuo Huang, Xingliang Yuan, Gholamreza Haffari, Lizhen Qu
Abstract
The increasing adoption of large language models (LLMs) in cloud-based services has raised significant privacy concerns, as user inputs may inadvertently expose sensitive information. Existing text anonymization and de-identification techniques, such as rule-based redaction and scrubbing, often struggle to balance privacy preservation with text naturalness and utility. In this work, we propose a zero-shot, tree-searchbased iterative sentence rewriting algorithm that systematically obfuscates or deletes private information while preserving coherence, relevance, and naturalness. Our method incrementally rewrites privacy-sensitive segments through a structured search guided by a reward model, enabling dynamic exploration of the rewriting space. Experiments on privacysensitive datasets show that our approach significantly outperforms existing baselines, achieving a superior balance between privacy protection and utility preservation.
Ask Lune
Ask anything. The answer quotes the paper.
Lune reads all of it and the papers around it, then shows you the passages behind every answer.
Lune answers from
the full paper · 1 top-tier paper that cites it · related work
Free to start. No credit card required.
Cited by top-tier papers1
Builds on16
- Language Models are Few-Shot LearnersTom B. Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah et al.NeurIPS 2020 · 64,255 citations
- Tree of Thoughts: Deliberate Problem Solving with Large Language ModelsShunyu Yao, Dian Yu, Jeffrey Zhao, Izhak Shafran et al.NeurIPS 2023 · 5,068 citations
- LEGAL-BERT: "Preparing the Muppets for Court'"Ilias Chalkidis, Manos Fergadiotis, Prodromos Malakasiotis, Nikolaos Aletras et al.EMNLP Findings 2020 · 1,073 citations
- Beyond Memorization: Violating Privacy via Inference with Large Language ModelsRobin Staab, Mark Vero, Mislav Balunovic, Martin T. VechevICLR 2024 · 211 citations
- Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity TheoryNiloofar Mireshghallah, Hyunwoo Kim, Xuhui Zhou, Yulia Tsvetkov et al.ICLR 2024 · 198 citations
Related papers
- NAP2: A Benchmark for Naturalness and Privacy-Preserving Text Rewriting by Learning from HumanShuo Huang, William MacLean, Xiaoxi Kang, Qiongkai Xu et al.EMNLP Findings 2025
- Robust Utility-Preserving Text Anonymization Based on Large Language ModelsTianyu Yang, Xiaodan Zhu, Iryna GurevychACL 2025
- Adaptive Text Anonymization: Learning Privacy-Utility Trade-offs via Prompt OptimizationGabriel Loiseau, Damien Sileo, Damien Riquet, Maxime Meyer et al.ACL Findings 2026 · 2 citations
- ALSA: Context-Sensitive Prompt Privacy Preservation in Large Language ModelsHongru Ma, Wenpeng Lu, Yanjie Liang, Tianyi Wang et al.KDD 2025 · 1 citation
- Privacy-R1: Privacy-Aware Multi-LLM Agent Collaboration via Reinforcement LearningZheng Hui, Yijiang River Dong, Sanhanat Sivapiromrat, Ehsan Shareghi et al.ACL 2026 · 4 citations
