Skip to Main Content
Securitysec-085P3

Differential privacy protects training data in fine-tuning.

DP-SGD fine-tuning with epsilon=8…DP-SGD fine-tuning with epsilon=8 prevents training data extraction attacks while retaining 95% of baseline model quality.

Context & Methodology

Without differential privacy, fine-tuned models can memorise and regurgitate sensitive training data when prompted.

Applicable Use Cases

workflow

Applies To

openaigoogle

Primary Impact

security

Confidence Level

Medium

Platform Status

Planned

Implementation Effort

high

Recommendation

monitor

Execution Priority

P3

Dependencies & Conflicts

Conflicts with:

Put This Evidence to Work

Use the STCO framework to implement findings like this in structured, testable prompts.

OpenAI structured outputs with JSON Schema achieve 99.9% schema adherence vs <70% with unconstrained generation.OpenAI, 'Structured Outputs: JSON Schema' document…