arXiv AI

ReCoPII: A Relation-Grounded Framework for Building Contextual PII Masking Datasets

ReCoPII is a relation‑grounded framework that generates contextual PII masking datasets without assuming a single data subject. It constructs ontology‑constrained entity relations, writes insertion sentences with placeholders, and derives MASK/KEEP labels through automated annotation and LLM verification. Applied to Korean documents across six domains, ReCoPII‑Ko achieves high agreement with human annotators (88.42% on KEEP labels) and improves masking performance compared to SPY‑style augmentation.

arXiv AI
Jun 18

RedactionBench

arXiv:2606. 18782v1 Announce Type: cross Abstract: Large Language Models are increasingly applied to sensitive domains that require redaction of personally identifiable information (PII).

By Sean Brynj\'olfsson, Shashvat Jayakrishnan, Esha Sali, Diptanshu Purwar, Madhav Aggarwal
arXiv AI
Aug 18

AWED-PIPER: Agents, Web Applications & Expert Detectors for Personally Identifiable Information Protection & Fine-grained Named Entity Recognition across 36 languages for 6.6 Billion Speakers

arXiv:2601. 10161v3 Announce Type: replace-cross Abstract: Named Entity Recognition (NER) and Personally Identifiable Information (PII) anonymization are critical tasks in Natural Language Processing (NLP) for information extraction and privacy preservation.

By Prachuryya Kaushik, Ashish Anand
arXiv Computation and Language
Oct 19

Veil-Then-Reveal: Protecting PII Privacy via Reversible Pseudo-Anonymization in Zero-Trust User--LLM Interaction

The paper introduces Veil-then-Reveal (VtR), a user-side framework that pseudo‑anonymizes personally identifiable information (PII) in prompts sent to large language models (LLMs) under a zero‑trust model. VtR replaces detected PII with realistic, same‑type surrogates using format‑preserving encryption for structured data and a keyed‑hash dictionary for semantic data, while preserving linguistic and structural cues. The system achieves high detection recall (97.9%), strong protection of detected values (95.2%), and near‑perfect round‑trip restoration (99.9%) across three datasets.

By Mohamed Shaaban, Mohamed Elmahallawy, Thomas E. Carroll
arXiv AI
Sep 25

ASIRF: An Agentic Framework for Context-Dependent Sensitive Information Redaction

ASIRF (Agentic Sensitive Information Redaction Framework) is a system that retrieves domain‑specific definitions of sensitive information from a flexible knowledge base at inference time, eliminating the need for retraining when adapting to new domains. It offers two architectures—a three‑call multi‑agent pipeline and a single‑agent variant—and has been evaluated on ten small open‑weight models across eight datasets, including out‑of‑distribution fictional domains. In 68 of 80 model‑domain combinations (85 %), ASIRF’s recall surpasses that of the OpenAI Privacy Filter, with most shortfalls limited to the filter’s training‑distribution domains.

By Sudha Priyadarshini, Mohamed Chahine Ghanem
arXiv AI
Jun 10

IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contexts

arXiv:2606. 09908v1 Announce Type: cross Abstract: Large language models (LLMs) are becoming widely deployed as personal AI assistants with access to sensitive user data, making privacy a major challenge for their design and evaluation.

By Ayana Hussain, Soumya Sharma, Golnoosh Farnadi, Nicholas Vincent, H\'eber Hwang Arcolezi, Ulrich A\"ivodji
arXiv AI
Aug 20

Redakto - The Incognito Tab for LLMs

Redakto is a new tool designed to anonymize text before it is processed by large language models (LLMs). It offers state‑of‑the‑art redaction of personally identifiable information (PII) and pseudonymization, accessible via a web interface, REST APIs, and model context protocol hooks. The authors evaluate its performance on legal and medical datasets, showing that anonymized texts retain utility comparable to the originals, enabling LLM tasks without significant loss of effectiveness.

By Saurav Kumar Saha, Tom R\"ohr, Felix Bie{\ss}mann