I was talking to a friend the other day about privacy leaks from AI, and they wanted to know if a machine learning model itself protects privacy. They argued that if you have a raw training set, and then you use it to generate a model that only classifies data, that should remove the privacy-sensitive information. This article explains whether that is true... and whether it is enough to protect privacy.