Abstract:Background: Artificial intelligence (AI) models are increasingly used in the medical domain. However, as medical data is highly sensitive, special precautions to ensure its protection are required. The gold standard for privacy preservation is the introduction of differential privacy (DP) to model training. Prior work indicates that DP has negative implications on model accuracy and fairness, which are unacceptable in medicine and represent a main barrier to the widespread use of privacy-preserving techniques. In this work, we evaluated the effect of privacy-preserving training of AI models regarding accuracy and fairness compared to non-private training. Methods: We used two datasets: (1) A large dataset (N = 193,311) of high quality clinical chest radiographs, and (2) a dataset (N = 1625) of 3D abdominal computed tomography (CT) images, with the task of classifying the presence of pancreatic ductal adenocarcinoma (PDAC). Both were retrospectively collected and manually labeled by experienced radiologists. We then compared non-private deep convolutional neural networks (CNNs) and privacy-preserving (DP) models with respect to privacy-utility trade-offs measured as area under the receiver operating characteristic curve (AUROC), and privacy-fairness trade-offs, measured as Pearson's r or Statistical Parity Difference. Results: We find that, while the privacy-preserving training yields lower accuracy, it largely does not amplify discrimination against age, sex or co-morbidity. However, we find an indication that difficult diagnoses and subgroups suffer stronger performance hits in private training. Conclusions: Our study shows that - under the challenging realistic circumstances of a real-life clinical dataset - the privacy-preserving training of diagnostic deep learning models is possible with excellent diagnostic accuracy and fairness.

Hyper-Noise Interference Privacy Protection Framework for Intelligent Medical Data-Centric Networks

Industrial Scale Privacy Preserving Deep Neural Network

A Distributed Privacy-Preserving Framework for Deep Learning with Edge-Cloud Computing.

Privacy-Preserving Collaborative Deep Learning with Unreliable Participants.

Masked image: Visually protected image dataset privacy-preserving scheme for convolutional neural networks

Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging

Pratical Privacy-preserving Convolutional Neural Network Inference Framework with Edge Computing for Health Monitoring

MP-Net: A Multi-Center Privacy-Preserving Network for Medical Image Segmentation

Improving the Classification Effect of Clinical Images of Diseases for Multi-Source Privacy Protection

Preserving fairness and diagnostic accuracy in private large-scale AI models for medical imaging

Consideration of Data Security and Privacy Using Machine Learning Techniques

Federated Learning Model with Adaptive Differential Privacy Protection in Medical IoT

Privacy-Preserving Intrusion Detection using Convolutional Neural Networks

PrivyNet: A Flexible Framework for Privacy-Preserving Deep Neural Network Training

A New Data Model for the Privacy Protection of Medical Images

Hierarchical fuzzy neural networks with privacy preservation for heterogeneous big data

Federated Neural Architecture Search for Medical Data Security

Distributed Federated Learning-Based Deep Learning Model for Privacy MRI Brain Tumor Detection

Adaptive Differential Privacy Mechanism Based on Entropy Theory for Preserving Deep Neural Networks

A Privacy-Preserving Scheme For Convolutional Neural Network-Based Applications In Mobile Cloud

A privacy preservation framework for feedforward-designed convolutional neural networks