Privacy guarantees for de-identifying text transformations - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2020

Privacy guarantees for de-identifying text transformations


Machine Learning approaches to Natural Language Processing tasks benefit from a comprehensive collection of real-life user data. At the same time, there is a clear need for protecting the privacy of the users whose data is collected and processed. For text collections, such as, e.g., transcripts of voice interactions or patient records, replacing sensitive parts with benign alternatives can provide de-identification. However, how much privacy is actually guaranteed by such text transformations, and are the resulting texts still useful for machine learning? In this paper, we derive formal privacy guarantees for general text transformation-based de-identification methods on the basis of Differential Privacy. We also measure the effect that different ways of masking private information in dialog transcripts have on a subsequent machine learning task. To this end, we formulate different masking strategies and compare their privacy-utility trade-offs. In particular, we compare a simple redact approach with more sophisticated word-byword replacement using deep learning models on multiple natural language understanding tasks like named entity recognition, intent detection, and dialog act classification. We find that only word-byword replacement is robust against performance drops in various tasks.
Fichier principal
Vignette du fichier
adelani_IS20.pdf (232.28 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02907939 , version 1 (07-08-2020)


  • HAL Id : hal-02907939 , version 1


David Ifeoluwa Adelani, Ali Davody, Thomas Kleinbauer, Dietrich Klakow. Privacy guarantees for de-identifying text transformations. INTERSPEECH 2020, Oct 2020, Shanghai, China. ⟨hal-02907939⟩
65 View
142 Download


Gmail Facebook X LinkedIn More