Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications
Marziyeh Ranjbar‐Mohammadi, Mohsen Vejdanihemmat, Mahshad Lotfinia, Mirabela Rusu, Daniel Truhn, Andreas Maier, Soroosh Tayebi Arasteh
Abstract
Differential privacy (DP) is a prominent technique for protecting sensitive patient data in medical deep learning (DL), yet deploying it without compromising clinical utility or equity remains challenging. This scoping review synthesizes applications of DP in medical DL across centralized and federated settings. A structured search identified 74 eligible studies published through March 2025. Across modalities and tasks, DP, especially via DP-SGD, can maintain clinically acceptable performance under moderate privacy budgets (ϵ ≈ 10), particularly in imaging. However, strict privacy (ϵ ≈ 1) often leads to substantial accuracy loss, with amplified degradation in smaller or heterogeneous datasets. Only a minority of studies evaluate fairness, and several report that DP can widen subgroup performance gaps. Beyond DP-SGD, alternative mechanisms, including generative modeling, local DP, and hybrid federated designs, are emerging, but reporting of privacy parameters remains inconsistent. We identify key gaps in fairness auditing and standardization, and outline priorities for equitable, clinically robust privacy-preserving DL.