---
title: "Linguistic Identity Leakage — paper by Zaghouani (2026)"
description: "This position paper argues that the language of a document still exposes its author. 23 references."
authors: ["Wajdi Zaghouani"]
year: 2026
venue: "Proceedings of the Seventh Workshop on Privacy in Natural Language Processing"
source: "https://aclanthology.org/2026.privatenlp-main.8/"
doi: "10.18653/v1/2026.privatenlp-main.8"
licence: "CC BY 4.0 (ACL Anthology)"
licence_url: "https://creativecommons.org/licenses/by/4.0/"
summary_licence: "Elamur Cosmic License"
canonical: "https://research.elamur.ai/free/en/papers/zaghouani-2026-linguistic-identity-leakage-when-language/"
---
[Elamur Research](https://md.research.elamur.ai/free/en/) · [this page in HTML](https://research.elamur.ai/free/en/papers/zaghouani-2026-linguistic-identity-leakage-when-language/)

[home](https://md.research.elamur.ai/free/en/) / [papers](https://md.research.elamur.ai/free/en/papers/) / [2026](https://md.research.elamur.ai/free/en/papers/2026/page/39/) / Linguistic Identity Leakage: When Language Reveals Identity in Anonymized Text

# Linguistic Identity Leakage: When Language Reveals Identity in Anonymized Text

**Authors:** [Wajdi Zaghouani](https://md.research.elamur.ai/free/en/authors/wajdi-zaghouani/) · **Year:** 2026 · **Venue:** [Proceedings of the Seventh Workshop on Privacy in Natural Language Processing](https://md.research.elamur.ai/free/en/venues/privatenlp/) ([Workshop on Privacy in Natural Language Processing 2026](https://md.research.elamur.ai/free/en/venues/privatenlp/2026/)) · **Publisher:** [Association for Computational Linguistics](https://md.research.elamur.ai/free/en/publishers/association-for-computational-linguistics/) · **Licence:** [CC BY 4.0 (ACL Anthology)](https://creativecommons.org/licenses/by/4.0/)

**Links:** [Publisher's page](https://aclanthology.org/2026.privatenlp-main.8/) · [PDF](https://aclanthology.org/2026.privatenlp-main.8.pdf) · [DOI 10.18653/v1/2026.privatenlp-main.8](https://doi.org/10.18653/v1/2026.privatenlp-main.8) · [OpenAlex](https://openalex.org/W7166808244)

**Citations:** 0 citations (OpenAlex, 2026-10-14)

## Summary
Conventional text anonymization removes names, addresses and other explicit identifiers. This position paper argues that the language of a document still exposes its author. Dialect vocabulary, morphology, code-switching habits and stylometric regularities can point to a person's region, social background or community after redaction. The author calls this residual risk Linguistic Identity Leakage (LIL) and the features that carry it Linguistic Personally Identifiable Information (L-PII).

The paper draws on sociolinguistics, stylometry and NLP privacy research. It sketches a preliminary five-category taxonomy of L-PII, illustrated mainly with Arabic dialect data. It also proposes the Identity Inference Risk (IIR) framework for auditing datasets and models for leftover identity risk. Current LLMs, it argues, make such inference cheap and scalable.

The work reports no experiments. Its contribution is conceptual, and IIR has not been implemented. Its value lies in exposing a blind spot of span-level de-identification, especially for small, linguistically distinctive communities. It recommends that dataset documentation and LLM privacy testing account for this risk.

## Key points
- **Running example:** a Tunisian sentence that mixes dialect and French passes NER-based anonymization untouched. It still contains three identity cues that an LLM or dialect classifier could exploit:
  - the Tunisian word "barsha";
  - a Maghrebi n- verb prefix;
  - a switch into French.
- **Cited evidence on inference and obfuscation:**
  - Staab et al. (2024) found that LLMs infer location, income and sex from Reddit profiles with up to 85% top-1 accuracy, and that anonymization and alignment did not prevent this.
  - Zhai et al. (2022) showed adversarial attributors cut obfuscation success from 20–30% to 5–10%.
- **Cited evidence on dialect granularity:** the MADAR Arabic Dialect Corpus covers 25 cities, implying written dialect may reveal a writer's city, not only their country.
- **Recommendations:**
  - treat dialect, sociolect and style as quasi-identifiers in Datasheets for Datasets;
  - accompany releases with an IIR audit giving per-category risk scores;
  - restrict dialect-rich subsets to vetted researchers;
  - test LLMs for demographic inference, beyond memorization and membership inference.
- **Limitations stated by the author:**
  - there is no empirical measurement of LIL;
  - the taxonomy comes from conceptual synthesis rather than the Nickerson et al. (2013) method;
  - the idea that generative AI could flatten stylistic variation and thereby lower LIL has not been tested.

*Our summary of the paper, in our own words — not its text. The work belongs to its authors; read it at the links above.*

## Institutions

- [Northwestern University in Qatar](https://md.research.elamur.ai/free/en/universities/northwestern-university-in-qatar/) — University, Doha, Qatar · 39 works · 148 citations

📚 Shelves (6): [🖥️ Computer Science](https://md.research.elamur.ai/free/en/shelves/computer-science/) · 18,614 works · [🤖 Artificial Intelligence](https://md.research.elamur.ai/free/en/shelves/computer-science/artificial-intelligence/) · 17,965 works · [🎭 Arts and Humanities](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/) · 17,450 works · [🗣️ Language and Linguistics](https://md.research.elamur.ai/free/en/shelves/arts-and-humanities/language-and-linguistics/) · 17,296 works · [🤝 Social Sciences](https://md.research.elamur.ai/free/en/shelves/social-sciences/) · 1,954 works · [🤝 Sociology and Political Science](https://md.research.elamur.ai/free/en/shelves/social-sciences/sociology-and-political-science/) · 626 works

## Cite

Cite as: Wajdi Zaghouani. 2026. Linguistic Identity Leakage: When Language Reveals Identity in Anonymized Text. Proceedings of the Seventh Workshop on Privacy in Natural Language Processing.

The paper itself, not this page. BibTeX from the library's record of the work.

```bibtex
@inproceedings{zaghouani2026linguistic,
  title = {{Linguistic Identity Leakage: When Language Reveals Identity in Anonymized Text}},
  author = {Wajdi Zaghouani},
  booktitle = {Proceedings of the Seventh Workshop on Privacy in Natural Language Processing},
  year = {2026},
  doi = {10.18653/v1/2026.privatenlp-main.8},
  url = {https://doi.org/10.18653/v1/2026.privatenlp-main.8}
}
```

- [← previous Linguistic Feature Tagging for Automatic Classification of 27 Closely-Related Quechua Varieties](https://md.research.elamur.ai/free/en/papers/post-2026-linguistic-feature-tagging-automatic-classification/)
- [next → Linguistic Initialization for Inductive Reasoning in Heterogeneous Knowledge Graphs](https://md.research.elamur.ai/free/en/papers/pasquini-2026-linguistic-initialization-inductive-reasoning-heterogeneous/)
- [↑ back to papers of 2026](https://md.research.elamur.ai/free/en/papers/2026/page/39/)

## References

23 references, 2 of them with a card of ours. ↗ leads to the work, «find» searches for one we have no id for yet.

1. Muhammad Abdul-Mageed, Amr Keleg, AbdelRahim Elmadany, Chiyu Zhang, Injy Hamed, Walid Magdy, Houda Bouamor, and Nizar Habash. [NADI 2024: The fifth nuanced Arabic dialect identification shared task](https://md.research.elamur.ai/free/en/papers/mageed-2024-nadi-2024-fifth-nuanced-arabic/). In Proceedings of The Second Arabic Natural Language Processing Conference, pages 709–728, Bangkok, Th…
2. Houda Bouamor, Nizar Habash, Mohammad Salameh, Wajdi Zaghouani, Owen Rambow, Dana Abdulrahim, Ossama Obeid, Salam Khalifa, Fadhl Eryani, Alexander Erdmann, and Kemal Oflazer. The MADAR Arabic dialect corpus and lexicon. In Proceedings of the Eleventh International Conference on Language Resources an… [find](https://scholar.google.com/scholar?q=Houda+Bouamor%2C+Nizar+Habash%2C+Mohammad+Salameh%2C+Wajdi+Zaghouani%2C+Owen+Rambow%2C+Dana+Abdulrahim%2C+Ossama+Obeid%2C+Salam+Khalifa%2C+Fadhl+Eryani%2C+Alexander+Erdmann%2C+and+Kemal+Oflazer%2E+The+MADAR+Arabic+dialect+)
3. Nicholas Carlini, Florian Tramèr, Eric Wallace, Matthew Jagielski, Ariel Herbert-Voss, Katherine Lee, Adam Roberts, Tom Brown, Dawn Song, Úlfar Erlingsson, Alina Oprea, and Colin Raffel. Extracting training data from large language models. In Proceedings of the 30th USENIX Security Symposium (USENIX… [find](https://scholar.google.com/scholar?q=Nicholas+Carlini%2C+Florian+Tram%C3%A8r%2C+Eric+Wallace%2C+Matthew+Jagielski%2C+Ariel+Herbert%2DVoss%2C+Katherine+Lee%2C+Adam+Roberts%2C+Tom+Brown%2C+Dawn+Song%2C+%C3%9Alfar+Erlingsson%2C+Alina+Oprea%2C+and+Colin+Raffel%2E+Extracting+tr)
4. Springer, Berlin, Heidelberg, 2006. [find](https://scholar.google.com/scholar?q=Springer%2C+Berlin%2C+Heidelberg%2C+2006%2E)
5. Oluwaseyi Feyisetan, Borja Balle, Thomas Drake, and Tom Diethe. Privacy- and utility-preserving textual analysis via calibrated multivariate perturbations. In Proceedings of the 13th International Conference on Web Search and Data Mining (WSDM 2020), pages 178–186. [find](https://scholar.google.com/scholar?q=Oluwaseyi+Feyisetan%2C+Borja+Balle%2C+Thomas+Drake%2C+and+Tom+Diethe%2E+Privacy%2D+and+utility%2Dpreserving+textual+analysis+via+calibrated+multivariate+perturbations%2E+In+Proceedings+of+the+13th+International+Con)
6. ACM, 2020. [https://dl.acm.org/doi/](https://dl.acm.org/doi/) 10.1145/3336191.3371856 — [doi:10.1145/3336191.3371856](https://doi.org/10.1145/3336191.3371856) [↗](https://dl.acm.org/doi/)
7. Timnit Gebru, Jamie Morgenstern, Briana Vecchione, Jennifer Wortman Vaughan, Hanna Wallach, Hal Daumé III, and Kate Crawford. Datasheets for datasets. Communications of the ACM, 64(12):86– 92, 2021. [https://dl.acm.org/doi/10.1145/](https://dl.acm.org/doi/10.1145/) 3458723 [↗](https://dl.acm.org/doi/10.1145/)
8. Dhiman Goswami, Jai Kruthunz Naveen Kumar, and Sanchari Das. NLP privacy risk identification in social media (NLP-PRISM): A survey. arXiv preprint arXiv:2602.15866, 2026. [https://arxiv.org/](https://arxiv.org/) abs/2602.15866 [↗](https://arxiv.org/)
9. Clive Holes. Modern Arabic: Structures, Functions, and Varieties. Georgetown University Press, Washington, D.C., revised edition, 2004. [find](https://scholar.google.com/scholar?q=Clive+Holes%2E+Modern+Arabic%3A+Structures%2C+Functions%2C+and+Varieties%2E+Georgetown+University+Press%2C+Washington%2C+D%2EC%2E%2C+revised+edition%2C+2004%2E)
10. Timour Igamberdiev and Ivan Habernal. DP-BART for privatized text rewriting under local differential privacy. In Findings of the Association for Computational Linguistics: ACL 2023, pages 13914–13934, Toronto, Canada, 2023. Association for Computational Linguistics. https://aclanthology.org/ 2023.fi… [↗](https://aclanthology.org/)
11. Oleksandra Klymenko, Stephen Meisenbacher, and Florian Matthes. Differential privacy in natural language processing: The story so far. In Proceedings of the Fourth Workshop on Privacy in Natural Language Processing, pages 1–11, Seattle, United States, 2022. Association for Computational Linguistics.… [find](https://scholar.google.com/scholar?q=Oleksandra+Klymenko%2C+Stephen+Meisenbacher%2C+and+Florian+Matthes%2E+Differential+privacy+in+natural+language+processing%3A+The+story+so+far%2E+In+Proceedings+of+the+Fourth+Workshop+on+Privacy+in+Natural+Langu)
12. William Labov. Sociolinguistic Patterns. University of Pennsylvania Press, Philadelphia, PA, 1972. [find](https://scholar.google.com/scholar?q=William+Labov%2E+Sociolinguistic+Patterns%2E+University+of+Pennsylvania+Press%2C+Philadelphia%2C+PA%2C+1972%2E)
13. Pierre Lison, Ildikó Pilán, David Sanchez, Montserrat Batet, and Lilja Øvrelid. Anonymisation models for text data: State of the art, challenges and future directions. In Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conferen… [find](https://scholar.google.com/scholar?q=Pierre+Lison%2C+Ildik%C3%B3+Pil%C3%A1n%2C+David+Sanchez%2C+Montserrat+Batet%2C+and+Lilja+%C3%98vrelid%2E+Anonymisation+models+for+text+data%3A+State+of+the+art%2C+challenges+and+future+directions%2E+In+Proceedings+of+the+59th+Annua)
14. Justus Mattern, Benjamin Weggenmann, and Florian Kerschbaum. The limits of word level differential privacy. In Findings of the Association for Computational Linguistics: NAACL 2022, pages 867–881, Seattle, United States, 2022. Association for Computational Linguistics. https://aclanthology.org/ 2022… [↗](https://aclanthology.org/)
15. Jonathan Schler, Moshe Koppel, Shlomo Argamon, and James W. Pennebaker. Effects of age and gender on blogging. In Computational Approaches to Analyzing Weblogs, Papers from the 2006 AAAI Spring Symposium, Technical Report SS-06-03, pages 199– 205, Stanford, CA, 2006. AAAI. [find](https://scholar.google.com/scholar?q=Jonathan+Schler%2C+Moshe+Koppel%2C+Shlomo+Argamon%2C+and+James+W%2E+Pennebaker%2E+Effects+of+age+and+gender+on+blogging%2E+In+Computational+Approaches+to+Analyzing+Weblogs%2C+Papers+from+the+2006+AAAI+Spring+Sympos)
16. Robin Staab, Mark Vero, Mislav Balunović, and Martin Vechev. Beyond memorization: Violating privacy via inference with large language models. In The Twelfth International Conference on Learning Representations (ICLR 2024), 2024. [https://openreview.net/forum?id=kmn0BhQk7p](https://openreview.net/forum?id=kmn0BhQk7p) Robin Staab, Mark Vero, Mi… [↗](https://openreview.net/forum?id=kmn0BhQk7p)
17. Efstathios Stamatatos. A survey of modern authorship attribution methods. Journal of the American Society for Information Science and Technology, 60(3):538– 556, 2009. [https://onlinelibrary.wiley.com/](https://onlinelibrary.wiley.com/) doi/10.1002/asi.21001 — [doi:10.1002/asi.21001](https://doi.org/10.1002/asi.21001) [↗](https://onlinelibrary.wiley.com/)
18. Latanya Sweeney. k-anonymity: A model for protecting privacy. International Journal on Uncertainty, Fuzziness and Knowledge-Based Systems, 10(5):557– 570, 2002. [https://dl.acm.org/doi/10.1142/](https://dl.acm.org/doi/10.1142/) S0218488502001648 [↗](https://dl.acm.org/doi/10.1142/)
19. Wanyue Zhai, Jonathan Rusert, Zubair Shafiq, and Padmini Srinivasan. A girl has a name, and it’s . . . adversarial authorship attribution for deobfuscation. In Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pages 7372–7384, Dublin, Ir… [find](https://scholar.google.com/scholar?q=Wanyue+Zhai%2C+Jonathan+Rusert%2C+Zubair+Shafiq%2C+and+Padmini+Srinivasan%2E+A+girl+has+a+name%2C+and+it%E2%80%99s+%2E+%2E+%2E+adversarial+authorship+attribution+for+deobfuscation%2E+In+Proceedings+of+the+60th+Annual+Meeting+o)
20. Carol Myers-Scotton. Social Motivations for Codeswitching: Evidence from Africa. Clarendon Press, Oxford, 1993. [find](https://scholar.google.com/scholar?q=Carol+Myers%2DScotton%2E+Social+Motivations+for+Codeswitching%3A+Evidence+from+Africa%2E+Clarendon+Press%2C+Oxford%2C+1993%2E)
21. Tempestt Neal, Kalaivani Sundararajan, Aneez Fatima, Yiming Yan, Yingfei Xiang, and Damon Woodard. Surveying stylometry techniques and applications. ACM Computing Surveys, 50(6):86:1–86:36, 2017. [https://dl.acm.org/doi/10.1145/3132039](https://dl.acm.org/doi/10.1145/3132039) — [doi:10.1145/3132039](https://doi.org/10.1145/3132039) [↗](https://dl.acm.org/doi/10.1145/3132039)
22. Robert C. Nickerson, Upkar Varshney, and Jan Muntermann. A method for taxonomy development and its application in information systems. European Journal of Information Systems, 22(3):336–359, 2013. https://doi.org/10.1057/ejis.2012.26 — [doi:10.1057/ejis.2012.26](https://doi.org/10.1057/ejis.2012.26) [↗](https://doi.org/10.1057/ejis.2012.26)
23. Ildikó Pilán, Pierre Lison, Lilja Øvrelid, Anthi Papadopoulou, David Sánchez, and Montserrat Batet. [The text anonymization benchmark (TAB): A dedicated corpus and evaluation framework for text anonymization](https://md.research.elamur.ai/free/en/papers/pilan-2022-text-anonymization-benchmark-tab-dedicated/). Computational Linguistics, 48(4): 1053–1101, 2022. https://aclanthology.org/ 2022.cl-4.19 [↗](https://aclanthology.org/)

*Updated 2 November 2026*