Mitigating Disparate Impact of Differentially Private Learning through Bounded Adaptive Clipping
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866916772429430784 |
|---|---|
| author | Zhao, Linzh Rehn, Aki Heikkilä, Mikko A. Tajeddine, Razane Honkela, Antti |
| author_facet | Zhao, Linzh Rehn, Aki Heikkilä, Mikko A. Tajeddine, Razane Honkela, Antti |
| contents | Differential privacy (DP) has become an essential framework for privacy-preserving machine learning. Existing DP learning methods, however, often have disparate impacts on model predictions, e.g., for minority groups. Gradient clipping, which is often used in DP learning, can suppress larger gradients from challenging samples. We show that this problem is amplified by adaptive clipping, which will often shrink the clipping bound to tiny values to match a well-fitting majority, while significantly reducing the accuracy for others. We propose bounded adaptive clipping, which introduces a tunable lower bound to prevent excessive gradient suppression. Our method improves the accuracy of the worst-performing class on average over 10 percentage points on skewed MNIST and Fashion MNIST compared to the unbounded adaptive clipping, and over 5 percentage points over constant clipping. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2506_01396 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Mitigating Disparate Impact of Differentially Private Learning through Bounded Adaptive Clipping Zhao, Linzh Rehn, Aki Heikkilä, Mikko A. Tajeddine, Razane Honkela, Antti Machine Learning Cryptography and Security I.2.6; K.4.2 Differential privacy (DP) has become an essential framework for privacy-preserving machine learning. Existing DP learning methods, however, often have disparate impacts on model predictions, e.g., for minority groups. Gradient clipping, which is often used in DP learning, can suppress larger gradients from challenging samples. We show that this problem is amplified by adaptive clipping, which will often shrink the clipping bound to tiny values to match a well-fitting majority, while significantly reducing the accuracy for others. We propose bounded adaptive clipping, which introduces a tunable lower bound to prevent excessive gradient suppression. Our method improves the accuracy of the worst-performing class on average over 10 percentage points on skewed MNIST and Fashion MNIST compared to the unbounded adaptive clipping, and over 5 percentage points over constant clipping. |
| title | Mitigating Disparate Impact of Differentially Private Learning through Bounded Adaptive Clipping |
| topic | Machine Learning Cryptography and Security I.2.6; K.4.2 |
| url | https://arxiv.org/abs/2506.01396 |