Privacy considerations in ML Python - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is data privacy in machine learning?

Data privacy means protecting personal or sensitive information used in machine learning so it is not exposed or misused.

beginner

Why is privacy important when training machine learning models?

Privacy is important to keep individuals' data safe, avoid legal issues, and build trust with users.

intermediate

What is differential privacy?

Differential privacy is a technique that adds noise to data or results to protect individual information while still allowing useful analysis.

beginner

Name one common risk to privacy in machine learning.

One common risk is data leakage, where sensitive information can be unintentionally revealed through model outputs or training data exposure.

beginner

How can anonymization help with privacy?

Anonymization removes or masks personal identifiers in data so individuals cannot be easily recognized.

What does differential privacy do to protect data?

A Adds noise to data or results

B Deletes all data after training

C Shares data only with trusted users

D Encrypts data during training

Differential privacy adds noise to data or outputs to hide individual details while keeping overall patterns.

Which of these is a privacy risk in machine learning?

A Model accuracy

B Data leakage

C Faster training

D Data normalization

Data leakage can expose sensitive information unintentionally.

Why should personal data be anonymized before training?

A To increase data size

B To improve model speed

C To reduce model complexity

D To prevent identifying individuals

Anonymization helps protect privacy by removing personal identifiers.

Which law often requires privacy protection for personal data?

A GDPR

B HTTP

C HTML

D CSS

GDPR is a law that protects personal data privacy.

What is a simple way to protect privacy in datasets?

A Train longer

B Add more features

C Remove names and IDs

D Use bigger models

Removing names and IDs helps keep data anonymous.

Explain why privacy is important in machine learning and name two ways to protect it.

Think about protecting personal data and techniques to keep it safe.

Describe what data leakage is and how it can affect privacy in machine learning.

Consider how sensitive info might be revealed unintentionally.

Practice

1. What is the main reason to consider privacy in machine learning?

easy

A. To protect personal data from being exposed

B. To make the model run faster

C. To increase the size of the dataset

D. To improve the color of data visualizations

Solution

1. Step 1: Understand the role of privacy

   Privacy in machine learning is about keeping personal data safe and secure.

2. Step 2: Identify the main goal

   The main goal is to protect personal data from being exposed or misused.

3. Final Answer:

   To protect personal data from being exposed -> Option A

4. Quick Check:

   Privacy = Protect personal data [OK]

Hint: Privacy means keeping personal data safe [OK]

Common Mistakes:

• Thinking privacy speeds up models
• Confusing privacy with data size
• Mixing privacy with visualization features

2. Which of the following is a correct way to protect privacy before training a model?

easy

A. Include all personal details in the dataset

B. Remove or mask personal identifiers from data

C. Share the raw data publicly

D. Use the same password for all data files

Solution

1. Step 1: Review data preparation for privacy

   Removing or masking personal identifiers helps hide sensitive information.

2. Step 2: Check options for privacy protection

   Including personal details or sharing raw data exposes privacy; using weak passwords is unsafe.

3. Final Answer:

   Remove or mask personal identifiers from data -> Option B

4. Quick Check:

   Mask personal data = Protect privacy [OK]

Hint: Mask or remove personal info before training [OK]

Common Mistakes:

• Keeping all personal details
• Sharing raw data openly
• Ignoring data security practices

3. Consider this Python code snippet for data anonymization:

def anonymize(data):
    return [{k: (v if k != 'name' else 'REDACTED') for k, v in record.items()} for record in data]

sample_data = [{'name': 'Alice', 'age': 30}, {'name': 'Bob', 'age': 25}]
print(anonymize(sample_data))

What is the output?

medium

A. [{'name': 'REDACTED', 'age': 30}, {'name': 'REDACTED', 'age': 25}]

B. SyntaxError

C. [{'age': 30}, {'age': 25}]

D. [{'name': 'Alice', 'age': 30}, {'name': 'Bob', 'age': 25}]

Solution

1. Step 1: Understand the anonymize function

   The function replaces the value of the 'name' key with 'REDACTED' for each record.

2. Step 2: Apply the function to sample_data

   Names 'Alice' and 'Bob' become 'REDACTED', ages remain unchanged.

3. Final Answer:

   [{'name': 'REDACTED', 'age': 30}, {'name': 'REDACTED', 'age': 25}] -> Option A

4. Quick Check:

   Names replaced with REDACTED = [{'name': 'REDACTED', 'age': 30}, {'name': 'REDACTED', 'age': 25}] [OK]

Hint: Check key replacement in dict comprehension [OK]

Common Mistakes:

• Thinking names stay the same
• Removing the 'name' key instead of replacing
• Confusing syntax causing errors

4. The following code is intended to remove personal emails from a dataset but has a bug:

def remove_emails(data):
    for record in data:
        if 'email' in record:
            record.pop('email')
    return data

sample = [{'name': 'John', 'email': '[e-mail]'}, {'name': 'Jane'}]
print(remove_emails(sample))

What is the bug and how to fix it?

medium

A. Loop should iterate over a copy of data to avoid modification errors

B. pop() should be pop('email', None) to avoid errors

C. No bug; code works correctly

D. Function should return a new list without emails instead of modifying in place

Solution

1. Step 1: Analyze the pop usage

   pop('email') removes the 'email' key if it exists; no error if checked first.

2. Step 2: Check the loop and data modification

   Loop modifies records in place safely; no iteration over changing list structure.

3. Final Answer:

   No bug; code works correctly -> Option C

4. Quick Check:

   pop after key check = safe removal [OK]

Hint: Check if key exists before pop to avoid errors [OK]

Common Mistakes:

• Assuming pop causes error without key check
• Thinking list copy needed for dict modification
• Believing function must create new list always

5. You want to train a machine learning model on health data but must ensure privacy. Which combined approach best protects privacy while allowing model training?

hard

A. Publish all data publicly but only share model predictions

B. Use raw data with no changes and share model openly

C. Encrypt data but train model without removing identifiers

D. Remove personal identifiers and apply differential privacy during training

Solution

1. Step 1: Identify privacy protection methods

   Removing personal identifiers hides direct personal info; differential privacy adds noise to protect indirect info.

2. Step 2: Evaluate options for privacy and training

   Using raw data or publishing data openly risks privacy; encryption alone doesn't anonymize data for training.

3. Final Answer:

   Remove personal identifiers and apply differential privacy during training -> Option D

4. Quick Check:

   Combine anonymization + differential privacy = Remove personal identifiers and apply differential privacy during training [OK]

Hint: Combine data cleaning with privacy techniques for safety [OK]

Common Mistakes:

• Using raw data without protection
• Relying only on encryption without anonymization
• Publishing sensitive data openly