D. Yu, H. Zhang, W. Chen, J. Yin, and T.-Y. Liu, “How Does Data Augmentation Affect Privacy in Machine Learning?”, AAAI, vol. 35, no. 12, pp. 10746-10753, May 2021.