DP adds calibrated noise to training, preventing memorization of individual data points.
from opacus import PrivacyEngine
privacy_engine = PrivacyEngine()
model, optimizer, dataloader = privacy_engine.make_private(
module=model, optimizer=optimizer, data_loader=dataloader,
noise_multiplier=1.1, max_grad_norm=1.0
)