<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Addressing Unique Fairness Obstacles within Federated Learning</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Annie Abay</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Ebube Chuba</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Yi Zhou</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Nathalie Baracaldo</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Heiko Ludwig</string-name>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>IBM Research</institution>
          ,
          <addr-line>Almaden 650 Harry Road San Jose, California 95120</addr-line>
          ,
          <country country="US">USA</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>Efforts to reduce social bias in machine learning has increased in the past several years. As data privacy concerns grow, finding techniques to train private, debiased machine learning models becomes increasingly important. Federated Learning (FL) has emerged as a popular privacy-preserving machine learning strategy. FL, however, by not providing complete access to training data, brings with it a unique set of difficulties in bias mitigation that have yet to be explored. In this paper, we delve into these difficulties, and how they can affect bias measured in federated learning models.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>Introduction</title>
      <p>
        Machine learning applications are used throughout the world
to make decisions on matters with real-world consequences
[
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. These decisions can affect whether a patient gets one
medical treatment over another [
        <xref ref-type="bibr" rid="ref11">11</xref>
        ], which job applicant
gets an interview [
        <xref ref-type="bibr" rid="ref15">14</xref>
        ], or which loan application gets
approved [
        <xref ref-type="bibr" rid="ref2 ref7">2, 7</xref>
        ]. Over the past several years, attention has been
brought to the potential social bias machine learning
algorithms learn and subsequently induce onto the applications
they are involved in [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ]. Bias mitigation efforts, as a result,
have swelled.
      </p>
      <p>
        Many bias mitigation efforts focus on centralized machine
learning [
        <xref ref-type="bibr" rid="ref18 ref3 ref8">3, 8, 17</xref>
        ], where all training data is stored and
processed in a single place. However, as machine learning users
and efforts grow exponentially, the issue of data privacy
becomes more and more pertinent [
        <xref ref-type="bibr" rid="ref16">15</xref>
        ]; centralized machine
learning often does not address these concerns. Directives
to protect individual data abound, such as the Health
Insurance Portability and Accountability Act (HIPAA),
European General Data Protection Regulation (GDPR), New
York’s Stop Hacks and Improve Electronic Data Security
(SHIELD) Act, and more. As privacy-preserving techniques
have grown, machine learning approaches such as federated
learning (FL) [
        <xref ref-type="bibr" rid="ref10 ref14">13, 10</xref>
        ] have emerged.
      </p>
      <p>
        FL maintains data privacy by allowing multiple parties to
collaboratively train a model without sharing their data. FL
is already utilized in real-world settings, i.e. Google Gboard
with cell phones, enterprise frameworks such as IBM
Federated Learning [
        <xref ref-type="bibr" rid="ref12">12</xref>
        ].
      </p>
      <p>CCooppyyrigghhtt©©20220121fo,r Athsisopcaipaetirobnyfiotsr atuhtehoArsd.vUasnecepmeremnitteodf uAnrdtiefircial
ICntreelaltiigveenCcoem(wmwonws.Laiacaein.osregA).ttAribllutriiognh4ts.0reInsteerrvneadti.onal (CC BY 4.0).</p>
      <p>As seen in Figure 1, during each round of training, parties
(Pn) train a local model (M1), and are queried (Q) by the
aggregator (A) to send model updates (Rn); these updates can
be model parameters or a party’s local model. The
aggregator utilizes these to update the global model, usually
following a specific model fusion strategy. This strategy, called
the fusion algorithm, takes the model updates (R1...Rn) as
input and can combine them in a myriad of ways, based on
the design. It may simply average each party’s weights, or
perform a more involved aggregation, then return the global
model. This process repeats for several rounds until a certain
accuracy or maximum number of training rounds has been
reached.</p>
      <p>Designed for centralized machine learning, most bias
mitigation approaches measure and reduce undesired bias with
respect to a sensitive attribute, such as race or sex, in the
training dataset. Unfortunately, existing techniques are not
directly applicable to the federated learning setting. As
federated learning bars full access to the training dataset,
finding methods to address bias without directly examining
sensitive information is an open challenge. FL is unique, and as
the number bias mitigation methods in centralized machine
learning grow, it is increasingly apparent that there are
additional considerations to be made about how bias affects
federated learning models.</p>
      <p>In this paper, we investigate four sources of bias, three
unique to training in the federated learning setting. These are
traditional bias sources, party selection and subsampling,
data heterogeneity, and fusion algorithms. We hope this
discussion will stimulate research in this nacient field.</p>
    </sec>
    <sec id="sec-2">
      <title>Causes of Bias</title>
      <sec id="sec-2-1">
        <title>Traditional Causes of Bias</title>
        <p>
          Each party in a federated learning process trains their local
model similarly to how it would be trained in a centralized
machine learning. Factors, such as prejudice,
underestimation, and negative legacy [
          <xref ref-type="bibr" rid="ref9">9</xref>
          ], that have been recognized as
causing discrimination in centralized machine learning,
apply to federated learning as well.
        </p>
        <p>However, new sources of bias occur when training in a FL
fashion. Through the model updates shared at each round,
each party will introduce its own biases to the global model.</p>
        <p>In the following, we introduce unique challenges to
federated learning algorithms, setting and processing.</p>
      </sec>
      <sec id="sec-2-2">
        <title>Data Heterogeneity</title>
        <p>Unlike in centralized machine learning, federated learning
faces a unique challenge related to data heterogeneity.
Parties each have a local dataset that they use to train their
local model. It is very possible that each party’s subgroup of
data differs greatly from the overall data composition from
all parties involved. Additionally, in FL parties might be
capable of dynamic participation, where they can drop out of
a FL process and rejoin later on for various reasons, i.e.
connectivity restraints. Overall and relative data
composition thereby may be constantly changing, which affects how
the global model learns bias.</p>
        <p>For example, say a chain of hospitals wants to use
federated learning to train an image classifier for detecting heart
disease. Each hospital, in a different location, trains their
local model with their patients’ data. A hospital in a
predominantly minority neighborhood of a larger, predominantly
non-minority city is likely to have a very different set of
patients in its local dataset, relative to the overall composition
of the hospital chain’s set of patients.</p>
      </sec>
      <sec id="sec-2-3">
        <title>Fusion Algorithms</title>
        <p>
          When an aggregator incorporates local model updates into
the global federated model, it follows a strategy dictated
by a fusion algorithm. Fusion algorithm designs vary, and
influence the bias measured in the final model. For
example, some are designed to equally incorporate model updates
from parties, while others may perform a weighted average
based on party size (i.e. parties with larger datasets influence
the global model more than parties with smaller datasets)
[
          <xref ref-type="bibr" rid="ref14">13</xref>
          ]. Depending on the application of the federated learning
task, this could have negative effects on sensitive groups. In
recent work, researchers have proposed examining parties’
contributions to the global model to decide, or to what
extent, their model updates will affect the global model. Many
solely examine how model accuracy is affected, which does
not inform about the effect on model bias. Some robust
aggregation methods will leave out party replies that are
dissimilar from the rest altogether [
          <xref ref-type="bibr" rid="ref17 ref5">5, 16</xref>
          ], which easily can
exclude minority groups.
        </p>
        <p>In the same hospital example as above, some hospitals
training together have very different dataset sizes. This could
be based on some hospitals being located in areas where
the population is socioeconomically disadvantaged, thereby
those hospitals have less patients that can afford an
expensive medical procedure; these hospitals’ datasets would be
smaller. Involvement in a federated learning process that
rewards larger party size with more global model influence
would diminish these hospitals’ contributions to the global
model, and incorrectly give the impression that the model
is comprehensively learning from the hospital chain’s set of
patients. This example can be easily reproduced for
situations where other sensitive attributes like age, sex, or race
can affect whether or not a user’s data is systemically kept
out of a federated learning task.</p>
      </sec>
      <sec id="sec-2-4">
        <title>Party Selection and Subsampling</title>
        <p>
          Parties involved in a federated learning process are queried
by the aggregator at each round of training to send their
model updates, which the aggregator will then incorporate
into the global federated model. However, not all parties
might be involved in every round of training [
          <xref ref-type="bibr" rid="ref14 ref6">13, 6</xref>
          ]. There
are two main FL use cases, either where parties are as small
as cell phones, and the number of parties in such FL
systems is vast, or when parties are much larger entities and
the number of parties is fewer. Especially in FL tasks with
a large number of parties, the aim may be to satisfy a quota
of parties’ updates to begin the next round of training.
Depending on the federated learning task, different attributes,
some bias-correlated, can affect whether a party is included
in a training round.
        </p>
        <p>Consider a scenario where a company wants to train a
model to improve the user experience in its cell phone app,
and engages users in a FL process. In this example, each
phone is a party, and the question of which model updates
are included is dependent on network speed. Faster devices,
which are likely to be newer, are likely to be represented
at disproportionately higher rates than slower devices.
Likewise, devices in geographic regions with slower networks
may be represented at disproportionately lower rates.
Inclusion here is correlated with socioeconomic status, and is a
systemic source of bias.</p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>Conclusion</title>
      <p>Bias identification and mitigation in centralized machine
learning has been discussed in recent years. Since then,
federated learning has emerged and been rapidly put into
practice, due to its potential to mitigate privacy and regulatory
concerns related to machine learning. The shift from
centralized to federated learning comes with challenges that stem
from limited access to training data, alongside other
barriers. Overcoming these obstacles is key to understanding new
sources and causes of bias in FL settings. We have
identified four causes of bias affecting federated learning, three of
which are unique to the FL process. Successful solutions to
mitigate bias should consider multiple components of the FL
process, and ultimately ensure data privacy is maintained.
We hope this paper inspires further exploration in this area.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <surname>Angwin</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Larson</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ; Mattu,
          <string-name>
            <given-names>S.</given-names>
            ; and
            <surname>Mirchner</surname>
          </string-name>
          ,
          <string-name>
            <surname>L.</surname>
          </string-name>
          <year>2016</year>
          .
          <article-title>There's software used across the country to predict future criminals</article-title>
          .
          <article-title>And its biased against blacks</article-title>
          . URL https://github.com/propublica/compasanalysis. Accessed:
          <fpage>2019</fpage>
          -09-30.
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <surname>Bartlett</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Morse</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Stanton</surname>
          </string-name>
          , R.; and
          <string-name>
            <surname>Wallace</surname>
            ,
            <given-names>N.</given-names>
          </string-name>
          <year>2019</year>
          .
          <article-title>Consumer-lending discrimination in the FinTech era</article-title>
          .
          <source>Technical report, National Bureau of Economic Research.</source>
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <surname>Bellamy</surname>
            ,
            <given-names>R. K.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Dey</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Hind</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Hoffman</surname>
            ,
            <given-names>S. C.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Houde</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Kannan</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Lohia</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Martino</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ; Mehta,
          <string-name>
            <given-names>S.</given-names>
            ;
            <surname>Mojsilovic</surname>
          </string-name>
          ,
          <string-name>
            <surname>A.</surname>
          </string-name>
          ; et al.
          <year>2018</year>
          .
          <source>AI Fairness</source>
          <volume>360</volume>
          :
          <article-title>An Extensible Toolkit for Detecting, Understanding, and Mitigating Unwanted Algorithmic Bias</article-title>
          . arXiv preprint arXiv:
          <year>1810</year>
          .
          <year>01943</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <surname>Bhandari</surname>
            ,
            <given-names>E.</given-names>
          </string-name>
          <year>2016</year>
          .
          <article-title>Big Data Can Be Used To Violate Civil Rights Laws, and the FTC Agrees</article-title>
          . URL https://www.aclu.org/blog/free-future/
          <article-title>big-datacan-beused-violate-civil-rights-laws-and-ftc-agrees.</article-title>
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <surname>Blanchard</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Guerraoui</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          ; Stainer,
          <string-name>
            <surname>J.</surname>
          </string-name>
          ; et al.
          <year>2017</year>
          .
          <article-title>Machine learning with adversaries: Byzantine tolerant gradient descent</article-title>
          .
          <source>In Advances in Neural Information Processing Systems</source>
          ,
          <volume>119</volume>
          -
          <fpage>129</fpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <surname>Chai</surname>
            ,
            <given-names>Z.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Ali</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Zawad</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Truex</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Anwar</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Baracaldo</surname>
            ,
            <given-names>N.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Zhou</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Ludwig</surname>
            ,
            <given-names>H.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Yan</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          ; and Cheng,
          <string-name>
            <surname>Y.</surname>
          </string-name>
          <year>2020</year>
          .
          <article-title>TiFL: A Tier-based Federated Learning System</article-title>
          . arXiv preprint arXiv:
          <year>2001</year>
          .09249 .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <surname>Fuster</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Goldsmith-Pinkham</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          ; Ramadorai,
          <string-name>
            <given-names>T.</given-names>
            ; and
            <surname>Walther</surname>
          </string-name>
          ,
          <string-name>
            <surname>A.</surname>
          </string-name>
          <year>2020</year>
          .
          <article-title>Predictably unequal? the effects of machine learning on credit markets</article-title>
          .
          <source>The Effects of Machine Learning on Credit Markets (October</source>
          <volume>1</volume>
          ,
          <year>2020</year>
          ) .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <surname>Kamiran</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          ; and Calders,
          <string-name>
            <surname>T.</surname>
          </string-name>
          <year>2011</year>
          .
          <article-title>Data preprocessing techniques for classification without discrimination</article-title>
          .
          <source>Knowledge and Information Systems .</source>
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9]
          <string-name>
            <surname>Kamishima</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Akaho</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ; Asoh, H.; and
          <string-name>
            <surname>Sakuma</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          <year>2012</year>
          .
          <article-title>Fairness-aware Classifier with Prejudice Remover Regularizer</article-title>
          .
          <source>Proceedings of the European Conference on Machine Learning and Principles and Practice of Knowledge Discovery in Databases .</source>
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10] Konecˇny`, J.;
          <string-name>
            <surname>McMahan</surname>
            ,
            <given-names>H. B.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Yu</surname>
            ,
            <given-names>F. X.</given-names>
          </string-name>
          ; Richta´rik, P.;
          <string-name>
            <surname>Suresh</surname>
            ,
            <given-names>A. T.</given-names>
          </string-name>
          ; and
          <string-name>
            <surname>Bacon</surname>
            ,
            <given-names>D.</given-names>
          </string-name>
          <year>2016</year>
          .
          <article-title>Federated learning: Strategies for improving communication efficiency</article-title>
          .
          <source>arXiv preprint arXiv:1610</source>
          .
          <fpage>05492</fpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <surname>Lee</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ; Mohr,
          <string-name>
            <given-names>N. M.</given-names>
            ;
            <surname>Street</surname>
          </string-name>
          ,
          <string-name>
            <surname>W. N.</surname>
          </string-name>
          ; and Nadkarni,
          <string-name>
            <surname>P.</surname>
          </string-name>
          <year>2019</year>
          .
          <article-title>Machine learning in relation to emergency medicine clinical and operational scenarios: An overview</article-title>
          .
          <source>Western Journal of Emergency Medicine</source>
          <volume>20</volume>
          (
          <issue>2</issue>
          ):
          <fpage>219</fpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <surname>Ludwig</surname>
            ,
            <given-names>H.</given-names>
          </string-name>
          ; Baracaldo, N.;
          <string-name>
            <surname>Thomas</surname>
            ,
            <given-names>G.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Zhou</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Anwar</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Rajamoni</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ; Ong,
          <string-name>
            <given-names>Y.</given-names>
            ;
            <surname>Radhakrishnan</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            ;
            <surname>Verma</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            ;
            <surname>Sinn</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            ;
            <surname>Purcell</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            ;
            <surname>Rawat</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            ;
            <surname>Minh</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.</given-names>
            ;
            <surname>Holohan</surname>
          </string-name>
          ,
          <string-name>
            <given-names>N.</given-names>
            ;
            <surname>Chakraborty</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            ;
            <surname>Whitherspoon</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            ;
            <surname>Steuer</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            ;
            <surname>Wynter</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            ;
            <surname>Hassan</surname>
          </string-name>
          ,
          <string-name>
            <surname>H.</surname>
          </string-name>
          ; Laguna,
          <string-name>
            <surname>S.</surname>
          </string-name>
          ; Yurochkin,
          <string-name>
            <given-names>M.</given-names>
            ;
            <surname>Agarwal</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            ;
            <surname>Chuba</surname>
          </string-name>
          , E.; and
          <string-name>
            <surname>Abay</surname>
          </string-name>
          , A.
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          2020.
          <article-title>IBM Federated Learning: an Enterprise Framework White Paper V0.1</article-title>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          [13]
          <string-name>
            <surname>McMahan</surname>
            ,
            <given-names>H. B.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Moore</surname>
            ,
            <given-names>E.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Ramage</surname>
            ,
            <given-names>D.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Hampson</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ; et al.
          <year>2016</year>
          .
          <article-title>Communication-efficient learning of deep networks from decentralized data</article-title>
          .
          <source>arXiv preprint arXiv:1602</source>
          .
          <fpage>05629</fpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          [14]
          <string-name>
            <surname>Mujtaba</surname>
            ,
            <given-names>D. F.</given-names>
          </string-name>
          ; and
          <string-name>
            <surname>Mahapatra</surname>
            ,
            <given-names>N. R.</given-names>
          </string-name>
          <year>2019</year>
          .
          <article-title>Ethical considerations in ai-based recruitment</article-title>
          .
          <source>In 2019 IEEE International Symposium on Technology and Society (ISTAS)</source>
          ,
          <fpage>1</fpage>
          -
          <lpage>7</lpage>
          . IEEE.
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [15]
          <string-name>
            <surname>Reinsch</surname>
            ,
            <given-names>W. A.</given-names>
          </string-name>
          ; and
          <string-name>
            <surname>Lepczyk</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          <year>2018</year>
          .
          <article-title>A Data Localization Free-for-</article-title>
          <string-name>
            <surname>All</surname>
          </string-name>
          ?
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          [16]
          <string-name>
            <surname>Yin</surname>
            ,
            <given-names>D.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Chen</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Ramchandran</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ; and Bartlett,
          <string-name>
            <surname>P.</surname>
          </string-name>
          <year>2018</year>
          .
          <article-title>Byzantine-robust distributed learning: Towards optimal statistical rates</article-title>
          . arXiv preprint arXiv:
          <year>1803</year>
          .01498 .
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          [17]
          <string-name>
            <surname>Zafar</surname>
            ,
            <given-names>M. B.</given-names>
          </string-name>
          ;
          <string-name>
            <surname>Valera</surname>
            ,
            <given-names>I.</given-names>
          </string-name>
          ; Rodriguez,
          <string-name>
            <given-names>M. G.</given-names>
            ; and
            <surname>Gummadi</surname>
          </string-name>
          ,
          <string-name>
            <surname>K. P.</surname>
          </string-name>
          <year>2015</year>
          .
          <article-title>Fairness constraints: Mechanisms for fair classification</article-title>
          .
          <source>arXiv preprint arXiv:1507</source>
          .
          <fpage>05259</fpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>