In this way, models that are “blind” to demographic data like gender and race can still encode this information through other features that are statistically correlated with protected attributes.