Subgroup Membership Inference Audits of Differentially Private Synthetic Text
The audit shows that synthetic releases leak subgroup membership and that prior attacks systematically underestimate this leakage, and that DP is effective at the aggregate level: it substantially reduces average leakage at every budget the authors test.