Recommender systems have become indispensable tools for delivering personalized content. However, their reliance on user interaction data raises significant privacy concerns. Local Differential Privacy (LDP) offers strong privacy guarantees by perturbing user data at the client side before transmission. Yet, the noise introduced to ensure privacy often substantially degrades recommendation accuracy. To address this challenge, we propose a novel LDP-based recommendation algorithm grounded in Bayesian estimation. Our approach first applies a randomized response mechanism to locally perturb users’ implicit feedback and then leverages Bayesian inference on the server side to reconstruct the underlying user–item interaction probabilities. This two-stage framework effectively mitigates the adverse impact of injected noise while preserving rigorous privacy guarantees, thereby enabling high-quality model training even under stringent privacy constraints. Extensive experiments on three public benchmark datasets demonstrate that our method consistently outperforms state-of-the-art baselines, achieving a superior trade-off between privacy protection and recommendation utility. This work presents a practical, scalable solution for privacy-preserving recommendations—particularly valuable in settings involving untrusted servers and sparse interaction data.
- Open Access
- Article
Bayesian Local Differential Privacy for Implicit Feedback Recommendation
Author Information
Received: 30 Aug 2025 | Revised: 15 Oct 2025 | Accepted: 24 Oct 2025 | Published: 31 Oct 2025
Abstract
Keywords
local differential privacy | bayesian estimation | implicit feedback | recommender systems | privacy-preserving algorithm
References
- 1.
Ge, Y.; Liu, S.; Fu, Z.; et al. A Survey on Trustworthy Recommender Systems. ACM Trans. Recomm. Syst. 2024, 3, 1–68.
- 2.
Xu, L.; Zhang, J.; Li, B.; et al. Tapping the Potential of Large Language Models as Recommender Systems: A Comprehensive Framework and Empirical Analysis. ACM Trans. Knowl. Discov. Data 2024, 19, 105.
- 3.
Alzahrani, A.; Asghar, M.Z. Maintaining user security in consumer electronics-based online recommender systems using federated learning. IEEE Trans. Consum. Electron. 2024, 70, 2657–2665.
- 4.
Deng, J.; Wu, Q.; Wang, S.; et al. A Novel Joint Neural Collaborative Filtering Incorporating Rating Reliability. Inf. Sci. 2024, 665, 120406.
- 5.
Rendle, S.; Freudenthaler, C.; Gantner, Z.; et al. BPR: Bayesian Personalized Ranking from Implicit Feedback. arXiv 2012, arXiv:1205.2618.
- 6.
Lin, S.; Zhou, S.; Chen, J.; et al. ReCRec: Reasoning the Causes of Implicit Feedback for Debiased Recommendation. ACM Trans. Inf. Syst. 2024, 42, 158.
- 7.
Zhu, H.; Xiong, F.; Chen, H.; et al. Incorporating a Triple Graph Neural Network with Multiple Implicit Feedback for Social Recommendation. ACM Trans. Web 2024, 18, 23.
- 8.
Liu, H.; Wang, Y.; Zhang, Z.; et al. Matrix Factorization Recommender Based on Adaptive Gaussian Differential Privacy for Implicit Feedback. Inf. Process. Manag. 2024, 61, 103720.
- 9.
Luo, C.; Wang, Y.; Zhang, Y.; et al. Distributed Differentially Private Matrix Factorization for Implicit Data via Secure Aggregation. IEEE Trans. Comput. 2024, 74, 705–716.
- 10.
Zhang, S.; Yin, H. Comprehensive Privacy Analysis on Federated Recommender System Against Attribute Inference Attacks. IEEE Trans. Knowl. Data Eng. 2022, 36, 987–999.
- 11.
Zhu, Z.; Wu, C.; Fan, R.; et al. Membership Inference Attacks Against Sequential Recommender Systems. In Proceedings of The ACM Web Conference 2023, Austin, TX, USA, 30 April–4 May 2023; Association for Computing Machinery: New York, NY, USA, 2023; pp 1208–1219.
- 12.
Dwork, C.; McSherry, F.; Nissim, K.; et al. Calibrating Noise to Sensitivity in Private Data Analysis. In Proceedings of the Third Theory of Cryptography Conference (TCC 2006), New York, NY, USA, 4-7 March 2006; pp. 265–284.
- 13.
Dwork, C.; Roth, A. The Algorithmic Foundations of Differential Privacy. Found. Trends Theor. Comput. Sci. 2014, 9, 211–407.
- 14.
McSherry, F.; Mironov, I. Differentially private recommender systems: building privacy into the Netflix prize contenders. In Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Paris, France, 28 June–1 July 2009; pp. 627–636.
- 15.
Xu, Z.; Chu, C.; Song, S. An Effective Federated Recommendation Framework with Differential Privacy. Electronics 2024, 13, 1589.
- 16.
Deng, Y.; Zhou, W.; Haq, A.U.; et al. Differentially Private Recommender Framework with Dual Semi-Autoencoder. Expert Syst. Appl. 2025, 260, 125447.
- 17.
Di Fazio, A. Enhancing privacy in recommender systems through differential privacy techniques. In Proceedings of the 18th ACM Conference on Recommender Systems, Bari, Italy, 14–18 October 2024; pp. 1348–1352.
- 18.
Demelius, L.; Kern, R.; Trgler, A. Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey. Acm Comput. Surv. 2025, 57, 1-28.
- 19.
Guo, T.; Luo, J.; Dong, K.; et al. Locally Differentially Private Item-Based Collaborative Filtering. Inf. Sci. 2019, 502, 229–246.
- 20.
Gao, C.; Huang, C.; Lin, D.; et al. DPLCF: differentially private local collaborative filtering. In Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieval, Virtual, 25–30 July 2020; pp. 961–970.
- 21.
Hu, W.; Fang, H. Towards Differential Privacy in Sequential Recommendation: A Noisy Graph Neural Network Approach. Acm Trans. Knowl. Discov. Data 2024, 18, 125.
- 22.
Ferrara, A.; Fazio, A.D.; Mancino, A.C.M.; et al. Enhancing utility in differentially private recommendation data release via exponential mechanism. In Proceedings of the 47th European Conference on Information Retrieval, ECIR 2025, Lucca, Italy, 6–10 April 2025; Springer Nature: Cham, Switzerland, 2025; pp. 34–51.
- 23.
Neera, J.; Chen, X.; Aslam, N.; et al. Private and Utility Enhanced Recommendations with Local Differential Privacy and Gaussian Mixture Model. IEEE Trans. Knowl. Data Eng. 2021, 35, 4151–4163.
- 24.
Sarkar, S.; Shinde, S.; Shedge, R. Elevating Privacy in Recommendation Systems with Hybrid Noise in Local Differential Privacy. In Proceedings of World Conference on Artificial Intelligence: Advances and Applications (WCAIAA 2024), Singapore, Singapore, 1–3 October 2024; pp. 241–256.
- 25.
Mllner, P.; Lex, E.; Schedl, M.; et al. The impact of differential privacy on recommendation accuracy and popularity bias. In Proceedings of the 46th European Conference on Information Retrieval, ECIR 2024, Glasgow, UK, 24–28 March , 2024; Springer Nature: Cham, Switzerland, 2024; pp. 466–482.
- 26.
Rezaimehr, F.; Dadkhah, C. A Survey of Attack Detection Approaches in Collaborative Filtering Recommender Systems. Artif. Intell. Rev. 2020, 54, 2011–2066.
- 27.
Zhang, M.; Ren, Z.; Wang, Z.; et al. Membership inference attacks against recommender systems. In Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual, 15–19 November 2021; pp. 864–879.
- 28.
Himeur, Y.; Sohail, S.S.; Bensaali, F.; et al. Latest Trends of Security and Privacy in Recommender Systems: A Comprehen- sive Review and Future Perspectives. Comput. Secur. 2022, 118, 102746.
- 29.
Pan, Y.; Wu, Z.S.; Xu, H.; et al. Differentially private Bayesian persuasion. In Proceedings ofthe ACM on Web Conference 2025, Sydney, NSW, Australia, 28 April-2 May 2025; Association for Computing Machinery: New York, NY, USA, 2025; pp 1425–1440.
- 30.
Fienberg, S.E. A Brief History of Statistical Models for Network Analysis and Open Challenges. J. Comput. Graph. Stat. 2012, 21, 825–839.
- 31.
Chatterjee, S.; Diaconis, P.; Sly, A. Random Graphs with A Given Degree Sequence. Ann. Appl. Probab. 2010, 21, 1400–1435.
- 32.
Du, M.; Peng, J.; Hu, Y.;et al. Logistic Regression Matrix Factorization Recommendation Algorithm for Differential Privacy. J. Beijing Univ. Posts Telecommun. 2023, 46, 115–120. (In Chinese)
- 33.
He, X.; Deng, K.; Wang, X.; et al. LightGCN: Simplifying and powering graph convolution network for recommendation. In Proceedings of the 43rd International ACM SIGIR Conference on Research and Development in Information Retrieval, Virtual, 25–30 July 2020; pp. 639–648.
- 34.
Ran, X.; Wang, Y.; Zhang, L.; et al. A Differentially Private Nonnegative Matrix Factorization for Recommender System. Inf. Sci. 2022, 592, 21–35.
This work is licensed under a Creative Commons Attribution 4.0 International License.
Suite 4002 Level 4, 447 Collins Street, Melbourne, Victoria 3000, Australia
General Inquiries: info@sciltp.com