I remember reading a paper that showed that data samples that were used to train a GAN can be recovered almost perfectly, thus creating privacy concerns in GANs when used in medical patient data, for example.

​

Does anyone recall such a paper? Or what are your informed opinions on this topic, and could you provide some references?

​

Thanks!