Cited by 32Privacy-Preserving Technologies in DataRecommender Systems and TechniquesPrivacy, Security, and Data Protection

Towards user-oriented privacy for recommender system data: A personalization-based approach to gender obfuscation for user profiles

Open access
Slokom, Manel, Hanjalic, Alan, Larson, Martha·2021·Information Processing & Management

Abstract

In this paper, we propose a new privacy solution for the data used to train a recommender system, i.e., the user–item matrix. The user–item matrix contains implicit information, which can be inferred using a classifier, leading to potential privacy violations. Our solution, called Personalized Blurring (PerBlur), is a simple, yet effective, approach to adding and removing items from users’ profiles in order to generate an obfuscated user–item matrix. The novelty of PerBlur is personalization of the choice of items used for obfuscation to the individual user profiles. PerBlur is formulated within a user-oriented paradigm of recommender system data privacy that aims at making privacy solutions understandable, unobtrusive, and useful for the user. When obfuscated data is used for training, a recommender system algorithm is able to reach performance comparable to what is attained when it is trained on the original, unobfuscated data. At the same time, a classifier can no longer reliably use the obfuscated data to predict the gender of users, indicating that implicit gender information has been removed. In addition to introducing PerBlur, we make several key contributions. First, we propose an evaluation protocol that creates a fair environment to compare between different obfuscation conditions. Second, we carry out experiments that show that gender obfuscation impacts the fairness and diversity of recommender system results. In sum, our work establishes that a simple, transparent approach to gender obfuscation can protect user privacy while at the same time improving recommendation results for users by maintaining fairness and enhancing diversity.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1016/j.ipm.2021.102722

Cites

95 of 95 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Biased recommender systems are vulnerable to privacy breaches, where adversaries can exploit biased recommendations to access users' private information.

    “Moreover, biased systems are vulnerable to privacy breaches, where adversaries can exploit biased recommendations to access users' private information, posing a threat to the RS [10, 11].”

    From A Deep Dive into Fairness, Bias, Threats, and Privacy in Recommender Systems: Insights and Future Research (2024) · cites this paper as [10]

    Section 1.2 (page unavailable) describes an attacker using recommender-system data to infer users’ gender, supporting the privacy-risk portion of the claim. But the paper’s threat model concerns access to the user–item matrix, not exploiting biased recommendations; section 2.4 discusses bias as a separate fairness issue. (LLM, conf=0.86)

    Experimental — accuracy not yet measured
  • A black box attack remains challenging due to the need for knowledge about the RS algorithm or architecture, though possible.

    “However, it remains challenging due to the need for knowledge about the RS algorithm or architecture, though possible [10, 8991, 93, 95-97].”

    From A Deep Dive into Fairness, Bias, Threats, and Privacy in Recommender Systems: Insights and Future Research (2024) · cites this paper as [10]

    Section 1.2 (page unavailable) describes a possible black-box gender-inference attack in which the attacker has a trained classifier and the user–item matrix. It defines “blackbox” as lacking information about obfuscation; it does not say the attack is challenging because it requires knowledge of the recommender-system algorithm or architecture. (LLM, conf=0.78)

    Experimental — accuracy not yet measured
  • Based on user-item interaction data, the adversary exploits the relationship between user preferences, behaviours, recommendations, and data biases to infer hidden attributes like demographic information, interests, or other personal details.

    “Based on user-item interaction data, the adversary exploits the relationship between user preferences, behaviours, recommendations, and data biases to infer hidden attributes like demographic information, interests, or other personal details [10].”

    From A Deep Dive into Fairness, Bias, Threats, and Privacy in Recommender Systems: Insights and Future Research (2024) · cites this paper as [10]

    Split into 2 atoms — 1 confirmed, 1 partially supported, 0 disputed, 0 misattributed, 0 unverifiable. Expand the claim to see per-atom verdicts.

    Experimental — accuracy not yet measured
  • Users' private attributes typically include age, gender, political opinions, income, etc., which individuals prefer to keep confidential.

    “Users' private attributes typically include age, gender, political opinions, income, etc., which individuals prefer to keep confidential [10, 99].”

    From A Deep Dive into Fairness, Bias, Threats, and Privacy in Recommender Systems: Insights and Future Research (2024) · cites this paper as [10]

    Section 2.3, “Gender inference” (page not provided), identifies age, gender, and political views as sensitive attributes that a user may consider private. The cited passages do not identify income as one of those attributes, so the full list is not supported by this source. (LLM, conf=0.86)

    Experimental — accuracy not yet measured
  • Slokom et al. [10] explained that gender bias in data harms fairness in recommendations and creates opportunities for attribute inference attacks, threatening users' privacy.

    “Slokom et al. [10] explained that gender bias in data harms fairness in recommendations and creates opportunities for attribute inference attacks, threatening users' privacy.”

    From A Deep Dive into Fairness, Bias, Threats, and Privacy in Recommender Systems: Insights and Future Research (2024) · cites this paper as [10]

    Section 7 (Maintaining fairness) reports gender gaps in recommendation performance, while sections 1.2 (Threat model for gender inference) and 2.3 (Gender inference) describe privacy-threatening inference of attributes from user data. The paper does not establish the claim's causal link that gender bias in the data creates those inference opportunities or causes the fairness gaps. (LLM, conf=0.84)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

2 of the 97 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
Slokom, M., Hanjalic, A., & Larson, M.
Affiliations
  • Delft University of Technology (NL)
  • Radboud University Nijmegen (NL)
Corresponding author
Slokom, Manel
Venue
Information Processing & Management
Publisher
Elsevier BV
Published
2021-11
Volume
58
Issue
6
Pages
102722
ISSN
  • 0020-0271 (ISSN-L)
  • 0306-4573
OpenAlex
W3201577120
Cited by
31
References
97
Citations by year
2026: 3 · 2025: 8 · 2024: 7 · 2023: 6 · 2022: 5 · 2021: 2
FWCI
1.77
Type
journal article
Language
en
Open access
Locations
  • Information Processing & Management (publishedVersion, cc-by)
  • Radboud Repository (Radboud University) (submittedVersion)
  • Research Repository (Delft University of Technology) (submittedVersion, cc-by)
  • Radboud Repository (Radboud University) (submittedVersion, other-oa)
  • Data Archiving and Networked Services (DANS) (submittedVersion, other-oa)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
  • Physical Sciences › Computer Science › Information Systems › Recommender Systems and Techniques
  • Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
Keywords
user-item matrix, user profiles, recommendation fairness, recommendation diversity

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review