Privacy-preserving federated learning for diabetes risk prediction, externally validated on 1.28 million BRFSS patients.
Clinical risk models trained centrally tend to fail on out-of-domain patients, and privacy constraints often prevent pooling raw records across institutions in the first place. The goal: a diabetes risk model trained without sharing data that still holds up on a population it never saw.
Demographically partitioned NHANES client nodes train locally; four aggregation strategies — FedAvg, FedProx, FedNova, SCAFFOLD — are compared over 50 rounds under non-IID participation, with a DP-SGD privacy sweep (Opacus) tracing the utility–privacy frontier and isotonic calibration repairing probability estimates.
External validation on 1.28M BRFSS respondents reaches AUC 0.757 with ECE 0.001 after calibration — a generalization gap 40% narrower than centralized training, with utility recovered above ε≈10. Subgroup fairness is reported across demographic strata, and the full pipeline is reproducible end-to-end.
Wider generalization gap between training and real-world performance.
40% narrower gap — without any site ever sharing a patient record.
Generalization gap, centralized vs. federated