K. Liu, B. Tan, and S. Garg, “Subverting Privacy-Preserving GANs: Hiding Secrets in Sanitized Images”, AAAI, vol. 35, no. 17, pp. 14849-14856, May 2021.