RAG with Differential Privacy

Fuente: arXiv
Saved in:
Bibliographic Details
Main Author: Grislain, Nicolas
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909463662821376
author Grislain, Nicolas
author_facet Grislain, Nicolas
contents Retrieval-Augmented Generation (RAG) has emerged as the dominant technique to provide \emph{Large Language Models} (LLM) with fresh and relevant context, mitigating the risk of hallucinations and improving the overall quality of responses in environments with large and fast moving knowledge bases. However, the integration of external documents into the generation process raises significant privacy concerns. Indeed, when added to a prompt, it is not possible to guarantee a response will not inadvertently expose confidential data, leading to potential breaches of privacy and ethical dilemmas. This paper explores a practical solution to this problem suitable to general knowledge extraction from personal data. It shows \emph{differentially private token generation} is a viable approach to private RAG.
format Preprint
id arxiv_https___arxiv_org_abs_2412_19291
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle RAG with Differential Privacy
Grislain, Nicolas
Machine Learning
Artificial Intelligence
Cryptography and Security
Retrieval-Augmented Generation (RAG) has emerged as the dominant technique to provide \emph{Large Language Models} (LLM) with fresh and relevant context, mitigating the risk of hallucinations and improving the overall quality of responses in environments with large and fast moving knowledge bases. However, the integration of external documents into the generation process raises significant privacy concerns. Indeed, when added to a prompt, it is not possible to guarantee a response will not inadvertently expose confidential data, leading to potential breaches of privacy and ethical dilemmas. This paper explores a practical solution to this problem suitable to general knowledge extraction from personal data. It shows \emph{differentially private token generation} is a viable approach to private RAG.
title RAG with Differential Privacy
topic Machine Learning
Artificial Intelligence
Cryptography and Security
url https://arxiv.org/abs/2412.19291