arXiv: FedCVESA: Taking Away Training Data in Federated Learning via Correlation Value Encoding and Segmented Aggregation

This paper, published on arXiv, proposes a new technique called FedCVESA that allows attackers to reconstruct training data from federated learning models with high accuracy. Federated learning is a privacy-preserving machine learning approach where data remains on local devices, and only model updates are shared. The method exploits vulnerabilities in how model updates are encoded and aggregated, effectively stealing sensitive information that was assumed to be protected. While this is a research publication rather than a regulatory change, it highlights a significant emerging risk to data protection under frameworks like the GDPR and the EU AI Act.

Organizations deploying federated learning systems are directly affected, particularly in healthcare, finance, and any sector handling personal or sensitive data. This includes EU-based companies using federated learning for medical diagnostics, fraud detection, or customer analytics. The technique demonstrates that current privacy guarantees in federated learning may be insufficient, potentially exposing organizations to data breach liabilities and non-compliance with Article 5 of the GDPR on data minimization and Article 25 on data protection by design.

Compliance teams should immediately review any federated learning deployments and assess whether they rely solely on standard aggregation methods. Engage with data science teams to evaluate if additional privacy safeguards are needed, such as differential privacy, secure multi-party computation, or stronger encryption of model updates. Document these risk assessments and mitigation steps in your compliance records. Monitor for regulatory guidance from the EDPB or national authorities on this specific attack vector, and consider updating your Data Protection Impact Assessments (DPIAs) for any AI systems using federated learning.