Privacy without Noisy Gradients: Slicing Mechanism for Generative Model Training

Neural Information Processing Systems 

Training generative models with differential privacy (DP) typically involves injecting noise into gradient updates or adapting the discriminator's training procedure.