Skip to content

Can We Explain What We Anonymize? On the Impact of Data Anonymization on Post-hoc Model Explanations

Jul 2026 · 2026 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · pp. 20-28 · 1 citation · 27 references

Abstract

Privacy-preserving data publishing and explainable artificial intelligence (XAI) are both essential for trustworthy machine learning, yet their interaction remains largely underexplored. In practice, models are often trained on anonymized datasets, but little is known about how classical anonymization techniques affect post-hoc explanations. In this paper, we provide a systematic empirical study of how feature attribution rankings change under widely used anonymization models, including k-anonymity, $\ell$-diversity, t closeness, and $(\alpha, k)$-anonymity. Across multiple real-world datasets and classifiers, we compare explanations generated by SHAP and LIME and quantify their stability using rank correlation and hypothesis testing. Our findings reveal a fundamental trade-off: explainable privacy-preserving models are feasible under mild privacy constraints, but strict anonymization requirements often lead to unstable explanations and severe utility degradation.

View source

Similar papers

Conference Open access 2026

From Privacy-Utility Trade-Offs to Policies: Optimized Anonymization Recommendations for Data Trustees in Data Spaces

By mapping spatial transformation algorithms to ODRL constraints, this research provides data trustees with an approach to automatically enforce spatial privacy and sovereignty within data spaces.

Michael Steinert, Bekzod Nazarov, Thorsten Reitz et al. · 0 citations
Conference Jul 2026

Embedding-Space Anonymization for Privacy-Preserving AI Systems

This paper studies embedding-space privacy as a representation-level learning problem. Rather than altering raw records directly, the proposed framework applies embeddingspace transformation to full-record representations through Gaussian perturbation and adversarial representation sanitization. The method is evaluated...

D. Panagoulias, Evangelia-Aikaterini Tsichrintzi, E. Sakkopoulos · 0 citations
Preprint Aug 2026

Dependency Triad: A Metric to Quantify the Dependencies Between Attributes for Local Differential Privacy

A novel metric, ``Dependency Triad''(DT), is proposed, which summarizes the pairwise dependency information relevant to CPL using three parameters and yields a conservative estimator of pairwise CPL, which is particularly suitable for high-cardinality attributes.

Sandaru Jayawardana, S. Ulukus, Ming Ding et al. · 0 citations
Review Open access Aug 2026

Recent Advances in Text Anonymization: A Systematic Review

This survey provides the first comprehensive and systematic review of text anonymization methods published between 2020 and 2025, covering 48 primary studies identified through a structured search and rigorous screening procedure and reveals a growing shift from identifier‐centric de‐identification toward context‐aware...

Marina Litvak, A. Jorge · 0 citations
Open access Oct 2026

CoP: Coordinated Perturbation for Controlled Disclosure Under Local Differential Privacy

CoP is proposed, a coordinated perturbation mechanism designed to mitigate CIL in multidimensional data collection while preserving utility and significantly outperforms state-of-the-art LDP mechanisms in reducing disclosure while preserving analytical accuracy.

Sandaru Jayawardana, Ming Ding, Kanchana Thilakarathna · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.