Differential privacy enables fair and accurate AI-based analysis of speech disorders while protecting patient data

Abstract

Speech pathology has impacts on communication abilities and quality of life. While deep learning-based models have shown potential in diagnosing these disorders, the use of sensitive data raises critical privacy concerns. Although differential privacy (DP) has been explored in the medical imaging domain, its application in pathological speech analysis remains largely unexplored despite the equally critical privacy concerns. To the best of our knowledge, this study is the first to investigate DP's impact on pathological speech data, focusing on the trade-offs between privacy, diagnostic accuracy, and fairness. Using a large, real-world dataset of 200 hours of recordings from 2,839 German-speaking participants, we observed a maximum accuracy reduction of 3.85% when training with DP with high privacy levels. To highlight real-world privacy risks, we demonstrated the vulnerability of non-private models to gradient inversion attacks, reconstructing identifiable speech samples and showcasing DP's effectiveness in mitigating these risks. To explore the potential generalizability across languages and disorders, we validated our approach on a dataset of Spanish-speaking Parkinson's disease patients, leveraging pretrained models from healthy English-speaking datasets, and demonstrated that careful pretraining on large-scale task-specific datasets can maintain favorable accuracy under DP constraints. A comprehensive fairness analysis revealed minimal gender bias at reasonable privacy levels but underscored the need for addressing age-related disparities. Our results establish that DP can balance privacy and utility in speech disorder detection, while highlighting unique challenges in privacy-fairness trade-offs for speech data. This provides a foundation for refining DP methodologies and improving fairness across diverse patient groups in real-world deployments.

References in corpus (11)

• Deep Learning with Differential Privacy
• Renyi Differential Privacy
• Do Gradient Inversion Attacks Make Federated Learning Unsafe?
• Automated speech-based screening of depression using deep convolutional neural networks
• Private, fair and accurate: Training large-scale, privacy-preserving AI models in medical imaging
• User-Level Differential Privacy against Attribute Inference Attack of Speech Emotion Recognition in Federated Learning
• Federated learning for secure development of AI models for Parkinson's disease detection using speech from different languages
• Preserving privacy in domain transfer of medical AI models comes at no performance costs: The integral role of differential privacy
• The Impact of Speech Anonymization on Pathology and Its Limits
• The effect of speech pathology on automatic speaker verification -- a large-scale study
• Differentially private training of residual networks with scale normalisation

Cited by in corpus (1)

• Differential privacy for medical deep learning: methods, tradeoffs, and deployment implications