Abstract
As the use of machine learning models in real world high-stakes decision settings continues to grow, it is highly important that we are able to audit and control for any potential fairness violations these models may exhibit towards certain groups. To do so, one naturally requires access to sensitive attributes, such as demographics, biological sex, or other potentially sensitive features that determine group membership. Unfortunately, in many settings, this information is often unavailable. In this work we study the well known equalized odds (EOD) definition of fairness. In a setting without sensitive attributes, we first provide tight and computable upper bounds for the EOD violation of a predictor. These bounds precisely reflect the worst possible EOD violation. Second, we demonstrate how one can provably control the worst-case EOD by a new post-processing correction method. Our results characterize when directly controlling for EOD with respect to the predicted sensitive attributes is – and when is not – optimal when it comes to controlling worst-case EOD. Our results hold under assumptions that are milder than previous works, and we illustrate these results with experiments on synthetic and real datasets.
1. Introduction
Machine learning (ML) algorithms are increasingly used in high stakes prediction applications that can significantly impact society. For example, ML models have been used to detect breast cancer in mammograms [37], inform parole and sentencing decisions [14], and aid in loan approval decisions [41]. While these algorithms often demonstrate excellent overall performance, they can be dangerously unfair and negatively impact under-represented groups [38]. Some of these unforeseen negative consequences can even be fatal, e.g. deep learning models for chest x-ray disease classification exhibit under diagnosis bias towards certain sensitive groups [36]. Recommendations to ensure that ML systems do not exacerbate societal biases have been raised by several groups, including the White House, which in 2016, released a report on big data, algorithms, and civil rights [31]. It is thus critical to understand how to rigorously evaluate the fairness of ML algorithms and control for unfairness during model development.
These needs have prompted considerable research in the area of Fair ML. While there exist many definitions of algorithmic fairness [7], common notions of group fairness consider different error rates of a predictor across different groups: males and females, white and non-white, etc. For example, the equal opportunity criterion requires the true positive rate (TPR) be equal across both groups, while equalized odds requires both TPR and false positive rate (FPR) to be the same across groups [21]. Obtaining predictors that are fair therefore requires enforcing these constraints on error rates across groups during model development, which can be posed as a constrained (or regularized) optimization problem [35, 42, 2, 13, 16]. Alternatively, one can devise post-processing strategies to modify a certain predictor to correct for differences in TPR and FPR [21, 18, 12, 1], or even include data pre-processing steps that ensure that unfair models could not be obtained from such data to begin with [39, 8].
Naturally, all these techniques for estimating or enforcing fairness require access to a dataset with features, , responses, , and sensitive attributes, . However, in many settings this is difficult or impossible, as datasets often do not include samples that have all these variables. This could be because the sensitive attribute data was withheld due to privacy concerns, which is very common with medical data due to HIPAA federal law requirements, or simply because it was deemed unnecessary to record [40, 43]. A real-world example of this is in the recent Kaggle-hosted RSNA Chest X-Ray Pneumonia Detection Challenge [33]. Even though this dataset of chest x-rays was painstakingly annotated for pneumonia disease by dozens of radiologists, it did not include sensitive attributes (e.g., age, sex, and race), precluding the evaluation of fairness of the models developed as part of the challenge. In settings like this, where there is limited or no information on the sensitive attribute of interest, it is still important to be able to accurately estimate the violation of fairness constraints by a ML classifier and to be able to alleviate these violations before deploying it in a sensitive application
This leads to the natural question:
How can one assess and control the fairness of a classifier without having access to sensitive attribute data?
In other words, how can we measure and potentially control the fairness violations of a classifier for with respect to a sensitive attribute , when we have no data that jointly observes and ?
1.1. Related Work
Estimating unfairness and, more importantly, developing fair predictors where there is no – or only partial – information about the sensitive attribute has only recently received increasing attention. The recent work by Zhao et al. [44] explores the perspective of employing features that are correlated with the sensitive attribute, and shows that enforcing low correlation with such “fairness related features” can lead to models with lower bias. Although these techniques are promising, they require domain expertise to determine which features are highly correlated with the sensitive attribute. An appealing alternative that has been studied is the use proxy sensitive attributes that are created by a second predictor trained on a different data set that contains only sensitive attribute information [20, 25, 10, 5]. This strategy has been widely adopted in many domains such as healthcare [17], finance [6], and politics [23]. While using sensitive attribute predictors has proven to be an effective and practical solution, it must be done with care, as this opens new problems for estimating and controlling for fairness. The work by Prost et al. [34] considers the estimation of fairness in a setting where one develops a predictor for an unobserved covariate, but it does not contemplate predicting the sensitive attribute itself. On the other hand Chen et al. [10] study the sources of error in the estimation of fairness via predicted proxies computed using threshold functions, which are prone to over-estimation.
The closest to our work are the recent results by Kallus et al. [25], and Awasthi et al. [5, 4]. Kallus et al. [25] study the identifiability of fairness violations under general assumptions on the distribution and classifiers. They show that, in the absence of the sensitive attribute, the fairness violation of predictions, , is unidentifiable unless strict assumptions1 are made or if there is some common observed data over and . Nonetheless, they show not all hope is lost and provide closed form upper and lower bounds of the fairness violations of under the assumption that one has two datasets: one that is drawn from the marginal over and the other drawn from the marginal over . Their analysis, however, does not consider predictors or , and instead their bounds depend explicitly on the conditional probabilities, and , along with the distribution over the features, . Unfortunately, with this formulation, it is unclear how the bounds would change if the estimation of the conditional probabilities was inaccurate (as is the case when developing predictors in the real world). Furthermore, in settings where is high dimensional (as for image data), calculating such bounds would become intractable. Since the fairness violation cannot be directly modified, they then study when these bounds can be reduced and improved. However, they do so in settings that impose smoothness assumptions over , which clearly are not-verifiable without data over the complete joint distribution. As a result, their results do not provide any actionable method that could improve the bounds.
Awasthi et al. [5], on the other hand, make progress in understanding properties of the sensitive attribute predictor, , that are desirable for easy and accurate fairness violation estimation and control of a classifier . Assuming that , they demonstrate that the true fairness violation is in fact proportional to the estimated fairness violation (the fairness violation using in lieu of A). This relationships yields the counter-intuitive result that given a fixed error budget for the sensitive attribute predictor, the optimal attribute predictor for the estimation of the true fairness violation is one with the most unequal distribution of errors across the subgroups of the sensitive attribute. However, one is still unable to actually calculate the true fairness violation – as it is unidentifiable. Nonetheless, the relationship does demonstrates that if one can maintain the assumption above while controlling for fairness with respect to , then doing so will provably reduce the true fairness violation with respect to . Unfortunately, while these rather strict assumptions can be met in some limited scenarios (as in [4]), these are not applicable in general – and cannot even be tested without access to data over .
Overall, while progress has been made in understanding how to estimate and control fairness violations in the presence of incomplete sensitive attribute information, these previous results highlight that this can only be done in simple settings (e.g., having access to some data from the entire distribution, or by making strong assumptions of conditional independence). Moreover, it remains unclear whether tight bounds can be obtained that explicitly depend on the properties of the predictor , allowing for actionable bounds that can provably mitigate for its fairness violation without having an observable sensitive attribute or making stringent assumptions.
1.2. Contributions
The contributions of our work can be summarized as follows:
We study the well known equalized odds (EOD) definition of fairness in a setting where the sensitive attributes, , are not observed with the features and labels . We provide tight and computable bounds on the EOD violation of a classifier, . These bounds represent the worst-case EOD violation of and employ a predictor for the sensitive attributes, , obtained from a sample over the distribution .
We provide a precise characterization of the classifiers that achieve minimal worst-case EOD violations with respect to unobserved sensitive attributes. Through this characterization, we demonstrate when simply correcting for fairness with respect to the proxy sensitive attributes will yield minimal worst-case EOD violations, and when instead it proves to be sub-optimal.
We provide a simple and practical post-processing technique that provably yields classifiers that maximize prediction power while achieving minimal worst-case EOD violations with respect to unobserved sensitive attributes.
We illustrate our results on a series of simulated and real data of increasing complexity.
2. Problem Setting
We work within a binary classification setting and consider a distribution over where is the feature space, the label space, and the sensitive attribute space. Furthermore, and adopting the setting of [5], we consider 2 datasets, and . The former is drawn from the marginal over of while is drawn from the marginal of . In this way, and contain the same set of features, contains sensitive attribute information and contains label information. The drawn samples in and are i.i.d over their respective marginals and different from one another.
Similar to previous work [10, 34, 5], we place ourselves in a demographically scarce regime where there is designer who has access to to train a sensitive attribute predictor and a developer, who has access to , the sensitive attribute classifier , and all computable probabilites that the designer of can extract from . In this setting, the goal of the developer is to learn a classifier (from ) that is fair with respect to utilizing . The central idea is to augment every sample in , by , where . Intuitively, if the error of the sensitive attribute predictor, denoted herein by , is low, we could hope that fairness with respect to the real (albeit unobserved) sensitive attribute can be faithfully estimated. Our goal is to thus estimate the error incurred in measuring and enforcing fairness constraints by means of , and potentially alleviate or control for it.
Throughout the remainder of this work we focus on equalized odds (EOD) as our fairness metric [21] of interest as it is one of the most popular notions of fairness. Thus moving forward, the term fairness refers specifically to EOD. We denote for simplicity, and for define the group conditional probabilities
| (1) |
These probabilities quantify the TPR (when ) and FPR (when ), for either protected group ( or ). We assume that the base rates, so that these quantities are not undefined. With these conditionals probabilities, we define the true fairness violation of , with the two quantities
| (2) |
which respectively quantify the absolute difference in TPR and FPRs among the two protected groups.
We also need to characterize the performance of the sensitive attribute classifier, . The missclassification error of can be decomposed as, where , for . We define the difference in errors to be
| (3) |
In a demographically scarce regime, the rates , and more importantly the quantities of interest, and , cannot be computed because samples from and are not jointly observed. However, using the sensitive attribute classifier , we can predict on and compute
which serve as the estimates for the true base rates and group TPRs and FPRs.
3. Theoretical Results
With the setting defined, we will now present our results. The first result provides computable bounds on the true fairness violation of with respect to the true, but unobserved, sensitive attribute . The bounds precisely characterize the worst-case fairness violation of . Importantly, as we will explain later, this first result will provide insight into what properties must satisfy so that its worst-case fairness violation is minimal. In turn, these results will lead to a simple post-processing method that can correct a pretrained classifier into another one, , that has minimal worst-case fairness violations. Before presenting our findings, we first describe the key underlying assumption we make about the pair of classifiers, and , so that the subsequent results are true.
Assumption 1. For , the classifiers and satisfy
| (4) |
To parse this assumption, it is easy to show that this is met when a) is accurate enough for the setting, namely that , and b) the predictive power of is better than the ability of to predict the labels, – or more precisely, . We refer the reader to Appendix A for a thorough explanation for why this is true. While this assumption may seem limiting, this is milder than those in existing results: First, accurate predictors can be developed [6, 17, 23, 19], thus satisfying the assumption (our numerical results will highlight this fact as well). Second, other works [5, 9], require assumptions on and that are unverifiable in a demographically scarce regime. Our assumption, on the other hand, can always be easily verified because all the quantities are computable. Furthermore, this assumption can be also be relaxed if one desires partial guarantees. More specifically, if the above is true for and only for , then all subsequent results for hold. Similarly, if it only holds for , the results for hold. Therefore, if one only cares about the equal opportunity definition of fairness, as an example, then this only needs to hold for and .
3.1. Bounding Fairness Violations with Proxy Sensitive Attributes
With Assumption 1 in place, we present our main result.
Theorem 1 (Bounds on and . Under Assumption 1, we have that
| (5) |
where
Furthermore, the upper bounds for and are tight.
The proof, along with all others in this work, are included in Appendix A. We now make a few remarks on this result. First, the bound is tight in that there exists settings (albeit unlikely) with particular marginal distributions such that the bounds hold with equality. Second, even though and cannot be calculated, a developer can still calculate the worst-case fairness violations, and , because these depend on quantities that are all computable in practice. Thus, if and are low, then the developer can proceed having a guarantee on the maximal fairness violation of , even while not observing and . On the other hand, if these bounds are large, this implies a potentially large fairness violation over the protected group by and the developer should not proceed in deploying and instead seek to learn another classifier with smaller bounds. Third, the obtained bounds are linear in the parameters , which the developer can adjust as they are properties of : this will become useful shortly.
3.2. Optimal Worst-Case Fairness Violations
Given the result above, what properties should classifiers satisfy such that and are minimal? Moreover, are the classifiers that are fair with respect to , the ones that have smallest and ? We now answer these questions in the following theorem.
Theorem 2 (Minimizers of and ). Let be a fixed sensitive attribute classifier with errors and that produces rates . Let be the set of all predictors of , parameterized by rates , that, paired with h, satisfy Assumption 1. Then, with group conditional probabilities, that satisfies the following condition,
| (6) |
Furthermore, any such has minimal maximal fairness violation, i.e. ,
| (7) |
This result provides a precise characterization of the conditions that lead to minimal worst-case fairness violations. Observe that if , the classifier with minimal and involves such that , i.e. it is not fair with respect to . On the other hand, if the errors of are balanced (, then minimal bounds are achieved by being fair with respect to .
3.3. Controlling Fairness Violations with Proxy Sensitive Attributes
Now that we understand what conditions must satisfy so that it’s worst case fairness violations are minimal, what remains is a method to obtain such a classifier. We take inspiration from the post-processing method proposed by Hardt et al. [21], which derives a classifier from that satisfies equalized odds with respect to a sensitive attribute while minimizing an expected missclassification loss – only applicable if one has access to , which is not true in our setting. Nonetheless, since our method will generalize this idea, we first briefly comment on this approach. The method they propose works as follows: given a sample with initial prediction and sensitive attribute , the derived predictor , with group conditional probabilities , predicts with probability . The four probabilities can be then calculated so that satisfies equalized odds and the expected loss between and labels , i.e. , is minimized. The fairness constraint, along with the objective to minimize the expected loss, give rise to the linear program:
Equalized Odds Post-Processing (Hardt et al. [21])
| (8) |
Returning to our setting where we do not have access to but only proxy variables , we seek classifiers that are fair with respect to the sensitive attribute . Since these attributes are not available, (thus rendering the fairness violation to be unidentifiable [25]), a natural alternative is to minimize the worst-case fair violation with respect to , which can be computed as shown in Theorem 1. Of course, such an approach will only minimize the worst case fairness and one cannot certify that the true fairness violation will decrease because – as explained above – it is unidentifiable. Nonetheless, since we know what properties optimal classifiers must satisfy (as per Theorem 2), we can now modify the above problem to construct a corrected classifier, , as follows. First, we must employ in place of , which amounts to employing in lieu of . To this end, denote the (corrected) group conditional probabilities of to be . Second, the equalized odds constraint is replaced with the constraint in Theorem 2. Lastly, we also enforce the additional constraints detailed in Assumption 1 on the . With these modifications in place, we present the following generalized linear program:
Worst-case Fairness Violation Reduction
subject to
| (9) |
The solution to this linear program will yield a classifier that satisfies Assumption 1, has minimal and , and has minimal expected loss. Note, that if , then the coefficients of and will equal one, and so the first set of constraints simply reduces to for and the linear program above is precisely the post-processing method of [21] with in place of (while enforcing Assumption 1).
Let us briefly recap the findings of this section: We have shown that in a demographically scarce regime, one can provide an upper bound on the true fairness violation of a classifier (Theorem 1). Second, we have presented a precise characterization of the classifiers with minimal worst-case fairness violations. Lastly, we have provided a simple and practical post-processing method (a linear program) that utilizes a sensitive attribute predictor to construct classifiers with minimal worst-case fairness violations with respect to the true, unknown, sensitive attribute.
4. Experimental Results
We now illustrate our theoretical results on synthetic and real world datasets. The code and data necessary to reproduce these experiments are available at https://github.com/Sulam-Group/EOD-with-Proxies
4.1. Synthetic Data
We begin with a synthetic example that allows us to showcase different aspects of our results. The data consists of 3 features, , sensitive attribute , and response .
The features are sampled from , with
The sensitive attribute, , response , and classifier , are modeled as
where is the indicator function, is the sigmoid function and . Furthermore, are independent noise variables placed on the samples belonging to the groups and to ensure there is a non trivial fairness violation. Specifically, makes unfair with respect to . Lastly, to measure the predictive capabilities of , we use the loss function, , as this maximizes the well known Youden’s Index2.
4.1.1. Equal Errors
We model the sensitive attribute predictor as
where . We choose so that has a total error distributed so that with . We generate 1000 classifiers and for each one, calculate , and . Then, on each , we run the (naïve) equalized odds post processing algorithm to correct for fairness with respect to yield a classifier , and we also run our post-processing algorithm to yield an optimal classifier . For both sets of classifiers we again calculate the same quantities.
The results in Fig. 1 present the true fairness violations, worst-case fairness violations, and expected loss for the 3 sets of different classifiers. Observe that both and are significantly lower for and and that these values for both sets of classifiers are approximately the same. This is expected as and so performing the fairness correction algorithm and our proposed algorithm amount to solving nearly identical linear programs. We also show the true fairness violations, and for all the classifiers to portray the gap between the bounds and the true values. As mentioned before, these true values cannot be calculated in a real demographically scarce regime. Nonetheless, the developer of now knows, post correction, that . Lastly, observe that the expected loss for and are naturally higher compared to that of , however the increase in loss is minimal.
Figure 1:

Synthetic data : true fairness violations, worst-case fairness violations, and expected loss for , and
4.1.2. Unequal Errors
We model the sensitive attribute predictor in the same way as in the previous experiment except with , for a constant so that the sensitive attribute classifier still has the same total error of but distributed unevenly so that with and . As in the previous experiment we generate classifiers , and perform the same correction algorithms to yield and and present the same metrics as before.
The results in Fig. 2 depict the worst-case fairness violations and expected loss for the 3 sets of different classifiers. Observe that our correction algorithm yields classifiers, , that have significantly lower and . Furthermore, observe that the that results from performing the naïve fairness correction algorithm in fact have higher the original classifier Even though the total error has remained the same, its imbalance showcases the optimality of our correction method. Lastly, observe that there is a trade-off, albeit slight, in performing our correction algorithm. The expected loss for is higher than that of and .
Figure 2:

Synthetic data : true fairness violations, worst-case fairness violations, and expected loss for and
4.2. Real World Data
We will now showcase our results on various real world datasets and prediction tasks. We provide a brief description of each task below and further experimental details are included in Appendix B.
FIFA 2020 (Awasthi et al. [5]):
The task is to learn a classifier , using FIFA 2020 player data [29], that determines if a soccer players wage is above or below the median wage based on the player’s age and their overall attribute. The sensitive attribute is player nationality and the player’s name is used to learn the sensitive attribute predictor . We consider two scenarios, when (English = 0) and (French = 0).
ACSPublicCoverage (Ding et al. [15]):
The task is to learn a classifier , using the 2018 state census data, that determines if a low-income individual, not eligible for Medicare, has coverage from public health insurance or does not . The sensitive attribute is sex (Female = 0) and with a separate dataset (containing the same features used to learn (disregarding sex)), we learn the sensitive attribute predictor . We work with the 2018 California census data.
CheXpert (Irvin et al. [24]):
CheXpert is a large public dataset for chest radiograph interpretation, consisting of 224,316 chest radio graphs of 65,240 patients, with labeled annotations for 14 observations (positive, negative, or unlabeled) including cardiomegaly, atelectasis,consolidation, and several others. The task is to learn a classifier to determine if an X-ray contains an annotation for any abnormal condition or does not . The sensitive attribute is sex (Female = 0) and with a separate set of X-rays (different from those used to learn ) we learn the sensitive attribute predictor .
4.2.1. Verification of Assumption 1
In Appendix C we provide Table 1, which demonstrates that Assumption 1 holds for the settings described above. The Actual Value column of Table 1 lists the rates and the left and right columns list and respectively. From Table 1, it is clear that the lie in between and as required by Assumption 1. Notice, we only list the estimated group TPRs, for the ACSPublicCoverage 2018 California dataset. This is because Assumption 1, for , does not hold for this state: even though is a very accurate predictor for , the label classifier has very low estimated group FPRs, . As a result, our theoretical results for cannot be used.
4.2.2. Results on CheXpert
The task is to measure and correct for any fairness violations that may exhibit towards the sex attribute assuming we do not have the true sex attribute and instead have a sensitive attribute predictor, . On a test dataset, we generate our predictions and to yield a dataset over , for which the sex predictor, , achieves an error of with and . We utilize the bootstrap method to generate 1000 samples of this dataset and for each sample, perform the same correction algorithms as before to yield and and calculate the same metrics as done in the previous experiments.
The results in Fig. 3 show that our proposed correction method performs the best in reducing and . Even though is very small, since , simply correcting for fairness with respect to is suboptimal in reducing the worst-case fairness violations. In particular, the results in Fig. 3 a are noteworthy as they depict how our proposed correction method and bounds allow the user to certify that the obtained classifier has a fairness violation in TPRs of no more than 0.06 without having access to the true sensitive attributes. Moreover, the improvement is significant, since before the correction one had . In a high-stakes decision setting, such as this one where the model could be used to aid in diagnosis, this knowledge could be vital. Naturally, the expected loss is highest for but that the increase is minimal. We make no claim as to whether this (small) increase in loss is reasonable for this particular problem setting, and the precise trade-offs must be defined in the context of a broader discussion involving policy makers, domain experts and other stakeholders.
Figure 3:

CheXpert data: true fairness violations, worst-case fairness violations, and expected loss for and
5. Limitations and Broader Impacts
While our results are novel and informative, they come with limitations. First, our results are limited to EOD (and its relaxations) as definitions of fairness. Fairness is highly context-specific and in many scenarios one may be interested in utilizing other definitions of fairness. One can easily extend our results to other associative definitions of fairness, such as demographic parity, predictive parity, and others. However, extending our results to counter-factual notions of fairness [28, 11, 32] is non trivial and matter of future work. We recommend thoroughly assessing the problem and context in question prior to selecting a definition. It is crucial to ensure that the rationale behind choosing a definition is based on reasoning from both philosophical and political theory, as each definition implicitly make a distinct set of moral assumptions. For example, with EOD, we implicitly assert that all individuals with the same true label have the same effort-based utility [22]. More generally, other statistical definitions of fairness such as demographic parity and equality of accuracy can be thought of as special instances of Rawlsian equality of opportunity and predictive parity, the other hand, can be thought of as an instance of egalitarian equality of opportunity [22, 30, 3]. We refer the reader to [22] to understand the relationship between definitions of fairness in machine learning and models of Equality of opportunity (EOP) – an extensively studied ideal of fairness in political philosophy.
A second limitation of our results is Assumption 1. This assumption is relatively mild, as it is met for accurate proxy sensitive attributes (as illustrated in the chest X-rays study). Yet, we conjecture that one can do away with this assumption and consider less accurate proxy sensitive attributes with the caveat that the worst case fairness violations will no longer be linear in the TPRs and FPRs. Thus, the characterization of the classifiers with minimal worst-case bounds would be more involved and the method to minimize these violations will likely be more difficult. Furthermore, while we proposed a simple post-processing correction method, it would be of interest to understand how one could train a classifier – from scratch – to have minimal violations. Lastly, in our setting we assume the sensitive attribute predictor and label classifier are trained on marginal distributions from the same joint distribution. As a next step, it would be important to understand how these results extend to settings where these marginal distributions come from (slightly) different joint distributions. All of this constitutes matter of future work.
Finally, we would like to remark the positive and potentially negative societal impacts of this work. Our contribution is focused on a solution to a technical problem – estimating and correcting for fairness violations when the sensitive attribute and responses are not jointly observed. However, we understand that fairness is a complex and multifaceted issue that extends beyond technical solutions and, more importantly, that there can be disconnect between algorithmic fairness and fairness in a broader socio-technical context. Nonetheless, we believe that technical contributions such as ours can contribute to the fair deployment of machine learning tools. In regards to the technical contribution itself, our results rely on predicting missing sensitive attributes. While such a strategy could be seen as controversial – e.g. because it could involve potential negative consequences such as the perpetuation of discrimination or violation of privacy – this is necessary to build classifiers with minimal worst-case fairness violations in a demographically scarce regime. On the one hand, not allowing for such predictions could be seen as one form of “fairness through unawareness”, which has been proven to be an incorrect and misleading strategy in fairness [21, 10]. Moreover, our post-processing algorithm, similar to that of Hardt et al. [21], admits implementations in a differentially private manner as well, since it only requires aggregate information about the data. As a result, our method, which uses an analogous formulation with different constraints, can also be carried out in a manner that preserves privacy. Lastly, note that if one does not follow our approach of correcting for the worst-case fairness by predicting the sensitive attributes, other models trained on this data can inadvertently learn this sensitive attribute indirectly and base decisions of it with negative and potentially grave consequences. Our methodology prevents this from happening by appropriately correcting models to have minimal worst-case fairness violations.
6. Conclusion
In this paper we address the problem of estimating and controlling potential EOD violations towards an unobserved sensitive attribute by means of predicted proxies. We have shown that under mild assumptions (easily satisfied in practice, as demonstrated) the worst-case fairness violations, and , have simple closed form solutions that are linear in the estimated group conditional probabilities . Furthermore, we give an exact characterization of the properties that a classifier must satisfy so that and are indeed minimal. Our results demonstrate that, even when the proxy sensitive attributes are highly accurate, simply correcting for fairness with respect to these proxy attributes might be suboptimal in regards to minimizing the worst-case fairness violations. To this end, we present a simple post-processing method that can correct a pre-trained classifier to yield an optimally corrected classifier, , i.e. one with with minimal worst-case fairness violations.
Our experiments on both synthetic and real data illustrate our theoretical findings. We show how, even if the proxy sensitive attributes are highly accurate, the smallest imbalance in and renders the naïve correction for fairness with respect to the proxy attributes suboptimal. More importantly, our experiments highlight our method’s ability to effectively control the worst-case fairness violation of a classifier with minimal decrease in the classifier’s overall predictive power. On a final observation on our empirical results, the reader might be tempted to believe that the classifier (referring to, e.g., Fig. 3) is better because it provides a lower “true” fairness than that of . Unfortunately, these true fairness violations are not identifiable in practice, and all one can compute are the provided upper bounds, which minimizes. In conclusion, our contribution aims to provide better and more rigorous control over potential negative societal impacts that arise from unfair machine learning algorithms in settings of unobserved data.
Acknowledgments and Disclosure of Funding
This work was supported in part by NIH award R01CA287422.
A. Proofs
A. 1. Explanation of Assumption 1
Assumption 1: For , the classifiers and satisfy
We now expand on the implications of this assumptions. Recall that , , and . Thus Assumption 1 states,
| (10) |
Immediately, it is clear that Eq. (10) implies
| (11) |
| (12) |
Now, the left inequality of Eq. (10) states
| (13) |
and the right inequality of Eq. (10) states
which implies
| (14) |
| (15) |
If , then this implies
| (16) |
| (17) |
and if ,
| (18) |
| (19) |
Any reasonable classifier would have the properties
| (20) |
| (21) |
Thus, Assumption 1 is met when
| (22) |
A. 2. Proof of Theorem 1
We only prove the result for as the proof for is completely analogous.
Proof. The rules of conditional probability and the law of total probability allow us to decompose and in the following manner,
| (23) |
| (24) |
| (25) |
| (26) |
and
| (27) |
| (28) |
| (29) |
| (30) |
Therefore, is a function of the four probabilities given by
| (31) |
which are unidentifiable in a demographically scarce regime and therefore not computable.
The Fréchet inequalities tell us that for
| (32) |
| (33) |
Observe that, is an increasing function with respect to the two probabilities
| (34) |
and a decreasing one with respect to the two probabilities,
| (35) |
As a result, is maximal when achieve their maximum values and achieve their minimum values. On the other hand, is minimal when achieve their minimum values and achieve their maximum values. With these facts, we now provide the upper bound. Recall from Appendix A. 1 that Assumption 1 implies
| (36) |
| (37) |
| (38) |
With Assumption 1 we first provide the values of . First,
| (39) |
| (40) |
because . Second,
| (41) |
| (42) |
| (43) |
| (44) |
Now note that,
| (45) |
| (46) |
where the second equality is due to Assumption 1. As a result
| (47) |
| (48) |
Therefore,
| (49) |
| (50) |
Now we provide the values of . First,
| (51) |
| (52) |
| (53) |
| (54) |
| (55) |
Second,
| (56) |
| (57) |
Therefore,
| (58) |
| (59) |
Plugging these 4 values into will yield the upper bound,
| (60) |
One can similarly use the assumptions to derive the lower bound,
| (61) |
and thus . One can use same arguments to derive the upper bound for . □
A. 3. Proof of Theorem 2
We prove the result for . We first start by proving the existence portion of the theorem.
Let be a sensitive attribute classifier with errors and that produces rates . Let be the set of classifiers for such that and satisfy Assumption 1. Consider any with group conditional probabilities, . Since we are only proving the result for , set . Consider the plane, with the -axis being and the -axis being . We know,
| (62) |
The two equations above define a rectangular region in the plane with a center , meaning any classifier , has that are in this region.
Now, denote to be a the set of classifiers for , with group conditional probabilities , that satisfy the condition,
| (63) |
This condition defines a line in the plane meaning any classifier in has that are on this line. Now observe that the classifier with , satisfy the above condition because,
| (64) |
| (65) |
| (66) |
| (67) |
This implies that the line defined by Eq. (63) intersects the rectangular region that Assumption 1 defines. As a result, is not empty, meaning there exists a classifier with group conditional probabilities that also satisfies the condition,
| (68) |
Now we prove that such a classifier has minimal bounds. Theorem 1 tells us that for
Note that is linear in and and that and are constants such that simply because is the upper bound for and is the lower bound. Since these bounds are affine functions shifted by a constant, then necessarily occurs when
| (69) |
meaning
| (70) |
have minimal upper bounds on . After rearranging terms, this condition is precisely
| (71) |
B. Experimental Details
FIFA 2020 (Awasthi et al. [5]):
The task is to learn a classifier , using FIFA 2020 player data [29], that determines if a soccer players wage is above or below the median wage based on the player’s age and their overall attribute. The sensitive attribute is player nationality and the player’s name is used to learn the sensitive attribute predictor . We consider two scenarios, when (English = 0) and (French = 0). To learn the sensitive attribute predictor , we train a Bidirectional Encoder Representations from Transformers (BERT) model [26] using an Adam optimizer [27] for 5 epochs. To learn the label classifier , we train a Random Forest classifier. On a test dataset, we generate our predictions and to yield a dataset over . We utilize the bootstrap method to generate 1,000 samples of this dataset and, for each sample, perform the same correction algorithms as before to yield and and calculate the same metrics as done in the synthetic data experiments. For the nationality predictor, , achieves an error of with and . For the nationality predictor, , achieves an error of with and . The results for both experiments are displayed in Fig. C.1 and Fig. C.2. In addition, we include Fig. C.1d, Fig. C.1e, Fig. C.2d, and Fig. C.2e, which display the difference between and and between and . These figures depict that the bounds of are smaller than the bounds of because the histograms of and are strictly to the right of the dashed green vertical line at 0, indicating that both differences are greater than or equal to 0.
ACSPublicCoverage (Ding et al. [15]):
The task is to learn a classifier , using the 2018 state census data, that determines if a low-income individual, not eligible for Medicare, has coverage from public health insurance or does not . The sensitive attribute is sex (Female = 0) and with a separate dataset (containing the same features used to learn (disregarding sex)), we learn the sensitive attribute predictor . We work with the 2018 California census data. To learn the sensitive attribute predictor and label classifier , we train two Random Forest classifiers. On a test dataset, we generate our predictions and to yield a dataset over . We utilize the bootstrap method to generate 1,000 samples of this dataset and, for each sample, perform the same correction algorithms as before to yield and and calculate the same metrics as done in the previous experiments. The sex predictor, , achieves an error of with and . The results for this experiment are in Fig. C.3. In addition, we include Fig. C.3b, which displays the difference between and . This figures depict that the TPR bounds of are smaller than the TPR bounds of because the histogram of is strictly to the right of the dashed green vertical line at 0, indicating that this difference is greater than 0.
CheXpert (Irvin et al. [24]):
CheXpert is a large public dataset for chest radiograph interpretation, consisting of 224,316 chest radio graphs of 65,240 patients, with labeled annotations for 14 observations (positive, negative, or unlabeled) including cardiomegaly, atelectasis,consolidation, and several others. The task is to learn a classifier to determine if an X-ray contains an annotation for any abnormal condition or does not . The sensitive attribute is sex (Female = 0) and with a separate set of X-rays (different from those used to learn ) we learn the sensitive attribute predictor . To learn both and we use a DenseNet121 convolutional neural network architecture. Images are fed into the network with size 320 × 320 pixels. We use the Adam optimizer [27] with default -parameters of and a fixed learning rate of 1 × 10−4). Batches are sampled using a fixed batch size of 16 images and we train for 5 epochs. On a test dataset, we generate our predictions and to yield a dataset over . We utilize the bootstrap method to generate 1,000 samples of this dataset, and for each sample, perform the same correction algorithms as before to yield and and calculate the same metrics as done in the previous experiments. The sex predictor, , achieves an error of with and . The results for this experiment are in Fig. 3.
C. Additional Figures & Results
Table 1:
Verification of Assumption 1
| Dataset | Actual Value | |||
|---|---|---|---|---|
| CheXpert | 0.03 | 0.80 | 0.97 | |
| 0.02 | 0.78 | 0.98 | ||
| 0.17 | 0.22 | 0.83 | ||
| 0.11 | 0.19 | 0.89 | ||
| FIFA 2020 (English & Argentina) | 0.07 | 0.93 | 0.94 | |
| 0.05 | 0.67 | 0.95 | ||
| 0.13 | 0.26 | 0.87 | ||
| 0.03 | 0.05 | 0.97 | ||
| FIFA 2020 (French & Spanish) | 0.08 | 0.86 | 0.92 | |
| 0.13 | 0.83 | 0.87 | ||
| 0.11 | 0.13 | 0.89 | ||
| 0.10 | 0.10 | 0.95 | ||
| ACSPublicCoverage (California) | 0.13 | 0.39 | 0.87 | |
| 0.24 | 0.33 | 0.76 |
Figure C.1:

Results for FIFA 2020 dataset with .
Figure C.2:

Results for FIFA 2020 dataset with }.
Figure C.3:

Results for ACSPublicCoverage 2018 California census data
Footnotes
Kallus et al. [25] show that if, , then the fairness violations are identifiable.
One can show that where is the Youden’s Index of .
Contributor Information
Beepul Bharti, Johns Hopkins University.
Paul Yi, University of Maryland.
Jeremias Sulam, Johns Hopkins University.
References
- [1].Adler Philip, Falk Casey, Friedler Sorelle A, Nix Tionney, Rybeck Gabriel, Scheidegger Carlos, Smith Brandon, and Venkatasubramanian Suresh. Auditing black-box models for indirect influence. Knowledge and Information Systems, 54:95–122, 2018. [Google Scholar]
- [2].Agarwal Alekh, Beygelzimer Alina, Dudík Miroslav, Langford John, and Wallach Hanna. A reductions approach to fair classification. In International conference on machine learning, pages 60–69. PMLR, 2018. [Google Scholar]
- [3].Alexander Larry A. Fair equality of opportunity: John rawls’(best) forgotten principle. Philosophy research archives, 11:197–208, 1985. [Google Scholar]
- [4].Awasthi Pranjal, Kleindessner Matthäus, and Morgenstern Jamie. Equalized odds postprocessing under imperfect group information. In International conference on artificial intelligence and statistics, pages 1770–1780. PMLR, 2020. [Google Scholar]
- [5].Awasthi Pranjal, Beutel Alex, Kleindessner Matthäus, Morgenstern Jamie, and Wang Xuezhi. Evaluating fairness of machine learning models under uncertain and incomplete information. In Proceedings of the 2021 ACM Conference on Fairness, Accountability, and Transparency, pages 206–214, 2021. [Google Scholar]
- [6].Baines Arthur P and Courchane Marsha J. Fair lending: Implications for the indirect auto finance market. Study Prepared for the American Financial Services Association, 2014. [Google Scholar]
- [7].Barocas Solon, Hardt Moritz, and Narayanan Arvind. Fairness and Machine Learning: Limitations and Opportunities. fairmlbook.org, 2019. http://www.fairmlbook.org [Google Scholar]
- [8].Calmon Flavio, Wei Dennis, Vinzamuri Bhanukiran, Ramamurthy Karthikeyan Natesan, and Varshney Kush R. Optimized pre-processing for discrimination prevention. Advances in neural information processing systems, 30, 2017. [Google Scholar]
- [9].Celis L Elisa, Huang Lingxiao, Keswani Vijay, and Vishnoi Nisheeth K. Fair classification with noisy protected attributes: A framework with provable guarantees. In International Conference on Machine Learning, pages 1349–1361. PMLR, 2021. [Google Scholar]
- [10].Chen Jiahao, Kallus Nathan, Mao Xiaojie, Svacha Geoffry, and Udell Madeleine. Fairness under unawareness: Assessing disparity when protected class is unobserved. In Proceedings of the conference on fairness, accountability, and transparency, pages 339–348, 2019. [Google Scholar]
- [11].Chiappa Silvia. Path-specific counterfactual fairness. In Proceedings of the AAAI conference on artificial intelligence, volume 33, pages 7801–7808, 2019. [Google Scholar]
- [12].Chzhen Evgenii, Denis Christophe, Hebiri Mohamed, Oneto Luca, and Pontil Massimiliano. Leveraging labeled and unlabeled data for consistent fair binary classification. Advances in Neural Information Processing Systems, 32, 2019. [Google Scholar]
- [13].Cotter Andrew, Gupta Maya, Jiang Heinrich, Srebro Nathan, Sridharan Karthik, Wang Serena, Woodworth Blake, and You Seungil. Training well-generalizing classifiers for fairness metrics and other data-dependent constraints. In International Conference on Machine Learning, pages 1397–1405. PMLR, 2019. [Google Scholar]
- [14].Dhar Swarup, Massaro Vanessa, Mir Darakhshan, and Ryan Nathan C. Uncertainty in criminal justice algorithms: simulation studies of the pennsylvania additive classification tool. arXiv preprint arXiv:2112.00301, 2021. [Google Scholar]
- [15].Ding Frances, Hardt Moritz, Miller John, and Schmidt Ludwig. Retiring adult: New datasets for fair machine learning. Advances in neural information processing systems, 34:6478–6490, 2021. [Google Scholar]
- [16].Donini Michele, Oneto Luca, Ben-David Shai, Shawe-Taylor John S, and Pontil Massimiliano. Empirical risk minimization under fairness constraints. Advances in neural information processing systems, 31, 2018. [Google Scholar]
- [17].Elliott Marc N, Morrison Peter A, Fremont Allen, McCaffrey Daniel F, Pantoja Philip, and Lurie Nicole. Using the census bureau’s surname list to improve estimates of race/ethnicity and associated disparities. Health Services and Outcomes Research Methodology, 9:69–83, 2009. [Google Scholar]
- [18].Feldman Michael, Friedler Sorelle A, Moeller John, Scheidegger Carlos, and Venkatasubramanian Suresh. Certifying and removing disparate impact. In proceedings of the 21 th ACM SIGKDD international conference on knowledge discovery and data mining, pages 259–268, 2015. [Google Scholar]
- [19].Gichoya Judy Wawira, Banerjee Imon, Bhimireddy Ananth Reddy, Burns John L, Celi Leo Anthony, Chen Li-Ching, Correa Ramon, Dullerud Natalie, Ghassemi Marzyeh, Huang Shih-Cheng, et al. Ai recognition of patient race in medical imaging: a modelling study. The Lancet Digital Health, 4(6):e406–e414, 2022. [DOI] [PMC free article] [PubMed] [Google Scholar]
- [20].Gupta Maya, Cotter Andrew, Fard Mahdi Milani, and Wang Serena. Proxy fairness, 2018.
- [21].Hardt Moritz, Price Eric, and Srebro Nati. Equality of opportunity in supervised learning. Advances in neural information processing systems, 29, 2016. [Google Scholar]
- [22].Heidari Hoda, Loi Michele, Gummadi Krishna P, and Krause Andreas. A moral framework for understanding fair ml through economic models of equality of opportunity. In Proceedings of the conference on fairness, accountability, and transparency, pages 181–190, 2019. [Google Scholar]
- [23].Imai Kosuke and Khanna Kabir. Improving ecological inference by predicting individual ethnicity from voter registration records. Political Analysis, 24(2):263–272, 2016. [Google Scholar]
- [24].Irvin Jeremy, Rajpurkar Pranav, Ko Michael, Yu Yifan, Ciurea-Ilcus Silviana, Chute Chris, Marklund Henrik, Haghgoo Behzad, Ball Robyn, Shpanskaya Katie, et al. Chexpert: A large chest radiograph dataset with uncertainty labels and expert comparison. In Proceedings of the AAAI conference on artificial intelligence, volume 33, pages 590–597, 2019. [Google Scholar]
- [25].Kallus Nathan, Mao Xiaojie, and Zhou Angela. Assessing algorithmic fairness with unobserved protected class using data combination. Management Science, 68(3):1959–1981, 2022. [Google Scholar]
- [26].Chang Kenton Jacob Devlin Ming-Wei and Toutanova Lee Kristina. Bert: Pre-training of deep bidirectional transformers for language understanding. In Proceedings of naacL-HLT, volume 1, page 2, 2019. [Google Scholar]
- [27].Kingma Diederik and Ba Jimmy. Adam: A method for stochastic optimization. In International Conference on Learning Representations (ICLR), San Diega, CA, USA, 2015. [Google Scholar]
- [28].Kusner Matt J, Loftus Joshua, Russell Chris, and Silva Ricardo. Counterfactual fairness. Advances in neural information processing systems, 30, 2017. [Google Scholar]
- [29].Leone Stefano. Fifa 21 complete player dataset, Oct 2020. URL https://www.kaggle.com/datasets/stefanoleone992/fifa-21-complete-player-dataset
- [30].Mason Andrew. Levelling the playing field: The idea of equal opportunity and its place in egalitarian thought. OUP; Oxford, 2006. [Google Scholar]
- [31].Munoz Cecilia, Patil DJ, and Smith Megan. Big data: A report on algorithmic systems, opportunity, and civil rights. Executive Office of the President, 2016. [Google Scholar]
- [32].Nabi Razieh and Shpitser Ilya. Fair inference on outcomes. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 32, 2018. [PMC free article] [PubMed] [Google Scholar]
- [33].Radiological Society of North America. Rsna pneumonia detection challenge, kaggle competition, 2018.
- [34].Prost Flavien, Awasthi Pranjal, Blumm Nick, Kumthekar Aditee, Potter Trevor, Wei Li, Wang Xuezhi, Ed H Chi Jilin Chen, and Beutel Alex. Measuring model fairness under noisy covariates: A theoretical perspective. In Proceedings of the 2021 AAAI/ACM Conference on AI, Ethics, and Society, pages 873–883, 2021. [Google Scholar]
- [35].Romano Yaniv, Bates Stephen, and Candes Emmanuel. Achieving equalized odds by resampling sensitive attributes. Advances in neural information processing systems, 33:361–371, 2020. [Google Scholar]
- [36].Seyyed-Kalantari Laleh, Zhang Haoran, McDermott Matthew BA, Chen Irene Y, and Ghassemi Marzyeh. Underdiagnosis bias of artificial intelligence algorithms applied to chest radiographs in under-served patient populations. Nature medicine, 27(12):2176–2182, 2021. [DOI] [PMC free article] [PubMed] [Google Scholar]
- [37].Shen Li, Margolies Laurie R, Rothstein Joseph H, Fluder Eugene, McBride Russell, and Sieh Weiva. Deep learning to improve breast cancer detection on screening mammography. Scientific reports, 9(1):12495, 2019. [DOI] [PMC free article] [PubMed] [Google Scholar]
- [38].Varshney Kush R and Alemzadeh Homa. On the safety of machine learning: Cyber-physical systems, decision sciences, and data products. Big data, 5(3):246–255, 2017. [PubMed] [Google Scholar]
- [39].Wei Dennis, Ramamurthy Karthikeyan Natesan, and Calmon Flavio P. Optimized score transformation for fair classification. Proceedings of Machine Learning Research, 108, 2020. [Google Scholar]
- [40].Weissman Joel S. and Hasnain-Wynia Romana. Advancing health care equity through improved data collection. New England Journal of Medicine, 364, 2011. [DOI] [PubMed] [Google Scholar]
- [41].Yu Xiaojiao. Machine learning application in online lending risk prediction. arXiv preprint arXiv:1707.04831, 2017. [Google Scholar]
- [42].Zafar Muhammad Bilal, Valera Isabel, Rogriguez Manuel Gomez, and Gummadi Krishna P. Fairness constraints: Mechanisms for fair classification. In Artificial intelligence and statistics, pages 962–970. PMLR, 2017. [Google Scholar]
- [43].Zhang Yan. Assessing fair lending risks using race/ethnicity proxies. Management Science, 64 (1):178–197, 2018. [Google Scholar]
- [44].Zhao Tianxiang, Dai Enyan, Shu Kai, and Wang Suhang. Towards fair classifiers without sensitive attributes: Exploring biases in related features. In Proceedings of the Fifteenth ACM International Conference on Web Search and Data Mining, pages 1433–1442, 2022. [Google Scholar]
