Erratum

The original differentially private zeroth-order fine-tuning algorithm was first proposed by Zhang et al. The algorithm was named DPZero, instead of DPZO (we made a mistake in our camera-ready version). Please refer to the following PDF for bibliographic details:

https://erguteb.github.io/files/usenix_p186_merged.pdf (see Page 14)

We apologize for any confusion.