Synthetic data has been advertised as a silver-bullet solution to
privacy-preserving data publishing that addresses the shortcomings of
traditional anonymisation techniques. The promise is that synthetic data drawn
from generative models preserves the statistical properties of the original
dataset but, at the same time, provides perfect protection against privacy
attacks. In this work, we present the first quantitative evaluation of the
privacy gain of synthetic data publishing and compare it to that of previous
anonymisation techniques.
Our evaluation of a wide range of state-of-the-art generative models
demonstrates that synthetic data either does not prevent inference attacks or
does not retain data utility. In other words, we empirically show that
synthetic data does not provide a better tradeoff between privacy and utility
than traditional anonymisation techniques.
Furthermore, in contrast to traditional anonymisation, the privacy-utility
tradeoff of synthetic data publishing is hard to predict. Because it is
impossible to predict what signals a synthetic dataset will preserve and what
information will be lost, synthetic data leads to a highly variable privacy
gain and unpredictable utility loss. In summary, we find that synthetic data is
far from the holy grail of privacy-preserving data publishing.

评估了现有生成模型绘制的合成数据的隐私保护优势，发现与传统的匿名化技术相比，其提供的隐私保护水平无法预测且数据效用低下，并不存在更好的隐私保护与数据效用均衡的解决方案。