On the Dichotomy Between Privacy and Traceability in Stochastic Convex Optimization
In this paper, we investigate the necessity of memorization in stochastic convex optimization (SCO) under geometries. Informally, we say a learning algorithm memorizes samples (or is -traceable) if, by analyzing its output, it is possible to identify at least of its training samples. Our main results uncover a fundamental tradeoff between traceability and excess risk in SCO. For every , we establish the existence of a risk threshold below which any sample-efficient learner must memorize a \em{constant fraction} of its sample. For , this threshold coincides with best risk of differentially private (DP) algorithms, i.e., above this threshold, there are algorithms that do not memorize even a single sample. This establishes a sharp dichotomy between privacy and traceability for . For , this threshold instead gives novel lower bounds for DP learning, partially closing an open problem in this setup. En route of proving these results, we introduce a complexity notion we term \em{trace value} of a problem, which unifies privacy lower bounds and traceability results, and prove a sparse variant of the fingerprinting lemma.
View on arXiv