arXiv AI

BR-MoE: Budgeted Semantic Release for Privacy-Preserving Traffic Analytics

arXiv Machine Learning
Sep 25

Calpric: Inclusive and Fine-grain Labeling of Privacy Policies with Crowdsourcing and Active Learning

Calpric is a system that combines automatic text selection, segmentation, active learning, and crowdsourced annotation to create a large, balanced training set for privacy policy classification. By simplifying the labeling task, it enables untrained crowd workers to match the performance of trained annotators and reduces inter‑annotator disagreement, cutting labeling costs. The approach yields a dataset of 16,000 policy text segments across nine data categories and produces models that deliver accurate, fine‑grained labels at a cost of roughly $0.92–$1.71 per segment.

By Wenjun Qiu, David Lie, Lisa Austin
arXiv Machine Learning
Sep 16

Differentially Private Semantic Plans for Aggregate Insight Generation

The paper introduces ‘DP-SPIN’, a trusted‑curator framework that generates differentially private semantic plans for aggregate insight generation. ‘DP-SPIN’ maps each record to a bounded sparse nonnegative vector over pre‑defined semantic concepts, sums these vectors into a semantic sketch, and releases a noisy plan containing admitted concepts and their masses. The framework provides user‑level privacy by clipping each user’s contribution and ensures that the final summary is differentially private through post‑processing, with guarantees established under both add/drop and replacement adjacency.

By Behrooz Razeghi
arXiv Computation and Language
Oct 16

QuasiLeak-Bench: Evaluating LLM-Based Privacy Detectors on Policy-Conditioned Quasi-Evidence Group Recovery

QuasiLeak-Bench is a new benchmark that evaluates large language model (LLM) based privacy detectors on their ability to recover quasi‑evidence groups—sets of weak quasi‑identifiers that jointly reveal private attributes—while respecting sender‑specified disclosure policies. The benchmark uses a reverse‑construction pipeline to generate documents containing verified quasi‑evidence groups and applies automated quality control to produce reliable ground truth at scale. Experiments show that current privacy detectors perform poorly on this task, but a fine‑tuned 4B LLM can outperform the best prompted models, indicating the task is learnable.

By Yufan Zhu, Yangfan Jiang, Yang Fei, Shizheng Hou, Shubhankar Mohapatra, Xiaokui Xiao
arXiv Machine Learning
Aug 5

DP-MemView: A Memory Interface for Attribute-Level Transcript Privacy in Long-Term LLM Agents

arXiv:2608. 03130v1 Announce Type: cross Abstract: Long-term memory enables persistent personalization in LLM agents, but repeated memory-conditioned responses can cumulatively reveal protected attributes even when they are never stated explicitly.

By Jong Wook Kim, Byoungjae Min, Kennedy Edemacu, Yoonhyuk Choi, Sae-Hong Cho, Beakcheol Jang
arXiv AI
Aug 24

Personalized Privacy Control in LLMs via Attention Head Intervention

The paper introduces the concept of personalized privacy for large language models, allowing user‑specific disclosure preferences to guide information sharing. It presents P3Bench, a benchmark that extends contextual privacy policies with personalized rules, and shows that existing prompt‑based methods often ignore these policies. To improve compliance, the authors propose “Repair”, an inference‑time attention head intervention that aligns model responses with user‑specific privacy rules.

By Junseok Kim, Nakyeong Yang, Kyomin Jung
arXiv AI
Sep 4

PrivateHub: Contrastive Diffusion Model for Private Sensor-Intensive Environment Data Generation

PrivateHub is a contrastive diffusion model designed to generate synthetic multi‑sensor data that protects private user activities while keeping non‑private applications detectable. It operates in two stages: App‑Conditioned Pre‑training, which conditions the model on application embeddings, and App‑Aware Fine‑tuning, which uses contrastive learning to separate private from non‑private data. Experiments on three real‑world datasets demonstrate that PrivateHub reduces private‑application inference accuracy by 40–50% without harming non‑private performance and remains robust even when attackers retrain on the synthetic data.

By Jiechao Gao, Yuandong Pan, Jie Wang, Michael Lepech, Bradford Campbell