arXiv: When T2I Synthetic Data Backfires: Amplified Privacy Risks in Real-Synthetic Mix Training

This paper, published on arXiv, presents new research demonstrating that training AI image generation models on a mix of real and synthetic data can actually increase, rather than reduce, privacy risks. The study shows that synthetic data, when used alongside real data, can inadvertently amplify the model's ability to reconstruct identifiable information about individuals from the original training set. This challenges the common assumption that synthetic data is a safe privacy-preserving tool.

Organizations in the EU that develop or deploy text-to-image (T2I) models, particularly in sectors like advertising, media, healthcare, and creative design, are directly affected. Any firm using synthetic data as a privacy safeguard under GDPR or the EU AI Act should take note, as this finding undermines a key risk mitigation strategy for high-risk AI systems.

Compliance teams should immediately review any data processing impact assessments that rely on synthetic data as a privacy protection measure. They should also update model training documentation to reflect this new risk, and consider requiring additional privacy audits for any mixed-data training pipelines. Engaging with the research community to validate these findings for your specific use case is also recommended before relying on synthetic data for compliance.