<p>Differential privacy (DP) is a prominent technique for protecting sensitive patient data in medical deep learning (DL), yet deploying it without compromising clinical utility or equity remains challenging. This scoping review synthesizes applications of DP in medical DL across centralized and federated settings. A structured search identified 74 eligible studies published through March 2025. Across modalities and tasks, DP, especially via DP-SGD, can maintain clinically acceptable performance under moderate privacy budgets (<i>ϵ</i> ≈ 10), particularly in imaging. However, strict privacy (<i>ϵ</i> ≈ 1) often leads to substantial accuracy loss, with amplified degradation in smaller or heterogeneous datasets. Only a minority of studies evaluate fairness, and several report that DP can widen subgroup performance gaps. Beyond DP-SGD, alternative mechanisms, including generative modeling, local DP, and hybrid federated designs, are emerging, but reporting of privacy parameters remains inconsistent. We identify key gaps in fairness auditing and standardization, and outline priorities for equitable, clinically robust privacy-preserving DL.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications

  • Marziyeh Mohammadi,
  • Mohsen Vejdanihemmat,
  • Mahshad Lotfinia,
  • Mirabela Rusu,
  • Daniel Truhn,
  • Andreas Maier,
  • Soroosh Tayebi Arasteh

摘要

Differential privacy (DP) is a prominent technique for protecting sensitive patient data in medical deep learning (DL), yet deploying it without compromising clinical utility or equity remains challenging. This scoping review synthesizes applications of DP in medical DL across centralized and federated settings. A structured search identified 74 eligible studies published through March 2025. Across modalities and tasks, DP, especially via DP-SGD, can maintain clinically acceptable performance under moderate privacy budgets (ϵ ≈ 10), particularly in imaging. However, strict privacy (ϵ ≈ 1) often leads to substantial accuracy loss, with amplified degradation in smaller or heterogeneous datasets. Only a minority of studies evaluate fairness, and several report that DP can widen subgroup performance gaps. Beyond DP-SGD, alternative mechanisms, including generative modeling, local DP, and hybrid federated designs, are emerging, but reporting of privacy parameters remains inconsistent. We identify key gaps in fairness auditing and standardization, and outline priorities for equitable, clinically robust privacy-preserving DL.