# Is your chatbot GDPR compliant? Open issues in agent design

arXiv: https://arxiv.org/abs/2005.12644 · HTML: https://mlsanity.com/paper/2005.12644/

## Key facts

- Cited by 4 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 26 May 2020.

## Built on by (most cited first, 4 of 4)

- [Are Chatbots Ready for Privacy-Sensitive Applications? An Investigation into Input Regurgitation and Prompt-Induced Sanitization](https://mlsanity.com/paper/2305.15008/) (2023)
- [Privacy Concerns in Chatbot Interactions: When to Trust and When to Worry](https://mlsanity.com/paper/2107.03959/) (2021)
- [StockBabble: A Conversational Financial Agent to support Stock Market Investors](https://mlsanity.com/paper/2106.08298/) (2021)
- [A Comprehensive Survey of Natural Language Generation Advances from the Perspective of Digital Deception](https://mlsanity.com/paper/2208.05757/) (2022)

## Abstract (arXiv)

Conversational agents open the world to new opportunities for human interaction and ubiquitous engagement. As their conversational abilities and knowledge has improved, these agents have begun to have access to an increasing variety of personally identifiable information and intimate details on their user base. This access raises crucial questions in light of regulations as robust as the General Data Protection Regulation (GDPR). This paper explores some of these questions, with the aim of defining relevant open issues in conversational agent design. We hope that this work can provoke further research into building agents that are effective at user interaction, but also respectful of regulations and user privacy.