arXiv:2602.18633cs.CL2026-02

用隐私保护的强化学习生成高质量合成文本,无需直接接触原始数据。

DP-RFT: Learning to Generate Synthetic Text via Differentially Private Reinforcement Fine-Tuning

  • 通过差分隐私保护的最近邻投票作为奖励信号,指导模型生成。
  • 在新闻、会议记录等场景中,生成文本的领域一致性和下游任务性能接近私有数据训练效果。
  • 适合需要保护数据隐私又追求高质合成数据的研究者和企业使用。

差分隐私(DP)下的合成数据生成在基于私有数据开发大语言模型(LLMs)中至关重要,因数据所有者无法提供对单个样本的直接访问。传统方法要么需暴露原始私有数据进行微调,要么依赖未经微调的模型,导致生成内容缺乏领域一致性。本文提出差分隐私强化微调(DP-RFT),一种面向合成数据生成的在线强化学习算法。该方法利用无眼私有语料库中差分隐私保护的最近邻投票作为奖励信号,驱动一个大语言模型生成合成样本,并通过近端策略优化(PPO)迭代提升生成质量。我们在长篇及特定领域文本生成任务(如新闻文章、会议记录、医学摘要)上评估了DP-RFT,结果表明其在生成内容保真度与下游任务效用方面显著缩小了私有演化与差分隐私微调方法之间的差距,同时严格遵守数据隐私边界。

原文摘要 · Abstract (English)

Differentially private (DP) synthetic data generation plays a pivotal role in developing large language models (LLMs) on private data, where data owners cannot provide eyes-on access to individual examples. Generating DP synthetic data typically involves a difficult trade-off. On one hand, DP finetuning methods train an LLM as a synthetic data generator with formal privacy guarantees, yet it still requires the raw content of private examples for model training. However, methods that avoid direct exposure to private data are bounded by an off-the-shelf, un-finetuned model, whose outputs often lack domain fidelity. Can we train an LLM to generate high-quality synthetic text without eyes-on access to individual private examples? In this work, we introduce Differentially Private Reinforcement Fine-Tuning (DP-RFT), an online reinforcement learning algorithm for synthetic data generation with LLMs. DP-RFT leverages DP-protected nearest-neighbor votes from an eyes-off private corpus as a reward signal for on-policy synthetic samples generated by an LLM. The LLM iteratively learns to generate synthetic data to maximize the expected DP votes through Proximal Policy Optimization (PPO). We evaluate DP-RFT for long-form and domain-specific synthetic data generation, such as news articles, meeting transcripts, and medical article abstracts. Our experiments show that DP-RFT closes the gap between private evolution and DP finetuning methods in terms of the fidelity and downstream utility of the generated synthetic data, while respecting the private data boundary.

合成数据差分隐私强化学习LLM

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。