A Comprehensive Survey on Trustworthy Recommender Systems
Not on the map. Why?
Abstract (arXiv)
As one of the most successful AI-powered applications, recommender systems aim to help people make appropriate decisions in an effective and efficient way, by providing personalized suggestions in many aspects of our lives, especially for various human-oriented online services such as e-commerce platforms and social media sites. In the past few decades, the rapid developments of recommender systems have significantly benefited human by creating economic value, saving time and effort, and promoting social good. However, recent studies have found that data-driven recommender systems can pose serious threats to users and society, such as spreading fake news to manipulate public opinion in social media sites, amplifying unfairness toward under-represented groups or individuals in job matching services, or inferring privacy information from recommendation results. Therefore, systems' trustworthiness has been attracting increasing attention from various aspects for mitigating negative impacts caused by recommender systems, so as to enhance the public's trust towards recommender systems techniques. In this survey, we provide a comprehensive overview of Trustworthy Recommender systems (TRec) with a specific focus on six of the most important aspects; namely, Safety & Robustness, Nondiscrimination & Fairness, Explainability, Privacy, Environmental Well-being, and Accountability & Auditability. For each aspect, we summarize the recent related technologies and discuss potential research directions to help achieve trustworthy recommender systems in the future.
Key facts. Cited by 32 papers in the map (data through 14 Oct 2026). Builds on 244 of its 461 references that are in the map. First posted on arXiv 21 Sep 2022.
Builds on
244 of 461 references.
References · 244
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
- 2019Advances and Open Problems in Federated Learningcited by 3,046
- 2017Billion-scale similarity search with GPUscited by 2,497
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2020Knowledge Distillation: A Surveycited by 1,603
- 2019Federated Learning: Challenges, Methods, and Future Directionscited by 1,538
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,416
- 2018Graph Convolutional Neural Networks for Web-Scale Recommender Systemscited by 1,138
38 more
- 2019BERT4Rec: Sequential Recommendation with Bidirectional Encoder Representations from Transformercited by 964
- 2016Adversarial Machine Learning at Scalecited by 936
- 2021A Survey of Quantization Methods for Efficient Neural Network Inferencecited by 815
- 2018LEAF: A Benchmark for Federated Settingscited by 792
- 2019Graph Neural Networks for Social Recommendationcited by 714
- 2016Fair prediction with disparate impact: A study of bias in recidivism prediction instrumentscited by 672
- 2016Inherent Trade-Offs in the Fair Determination of Risk Scorescited by 586
- 2020Graph Neural Networks in Recommender Systems: A Surveycited by 494
- 2019Federated Machine Learning: Concept and Applicationscited by 412
- 2017Algorithmic decision making and the cost of fairnesscited by 403
- 2022Recommendation as Language Processing (RLP): A Unified Pretrain, Personalized Prompt & Predict Paradigm (P5)cited by 402
- 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 384
- 2016SeqGAN: Sequence Generative Adversarial Nets with Policy Gradientcited by 376
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
- 2019ERNIE: Enhanced Representation through Knowledge Integrationcited by 302
- 2017A Survey of Model Compression and Acceleration for Deep Neural Networkscited by 301
- 2020FedML: A Research Library and Benchmark for Federated Machine Learningcited by 300
- 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 292
- 2020Bias and Debias in Recommender System: A Survey and Future Directionscited by 240
- 2018Explainable Recommendation: A Survey and New Perspectivescited by 210
- 2019The What-If Tool: Interactive Probing of Machine Learning Modelscited by 207
- 2021Whitening Sentence Representations for Better Semantics and Faster Retrievalcited by 202
- 2018Fairness of Exposure in Rankingscited by 190
- 2022Quantus: An Explainable AI Toolkit for Responsible Evaluation of Neural Network Explanations and Beyondcited by 171
- 2020Embedding-based Retrieval in Facebook Searchcited by 156
- 2022M6-Rec: Generative Pretrained Language Models are Open-Ended Recommender Systemscited by 152
- 2018RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasetscited by 149
- 2020A Survey of Privacy Attacks in Machine Learningcited by 146
- 2018The Frontiers of Fairness in Machine Learningcited by 141
- 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
- 2019Fairness-Aware Ranking in Search & Recommendation Systems with Application to LinkedIn Talent Searchcited by 138
- 2020RecBole: Towards a Unified, Comprehensive and Efficient Framework for Recommendation Algorithmscited by 138
- 2020To be Robust or to be Fair: Towards Fairness in Adversarial Trainingcited by 137
- 2013Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifierscited by 130
- 2019Fairness in Recommendation Ranking through Pairwise Comparisonscited by 127
- 2019Compositional Fairness Constraints for Graph Embeddingscited by 126
- 2018Equity of Attention: Amortizing Individual Fairness in Rankingscited by 124
- 2019Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learningcited by 122
50 most cited of 244 All 244 (JSON)
Built on by
Citing papers per year: 2023: 7; 2024: 9; 2025: 8; 2026: 8.
32 papers.
Sort:
By area:
- 2024A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Modelscited by 452
- 2023Recommender Systems in the Era of Large Language Models (LLMs)cited by 189
- 2023When MOE Meets LLMs: Parameter Efficient Fine-tuning for Multi-task Medical Applicationscited by 111
- 2023Generative Diffusion Models on Graphs: Methods and Applicationscited by 81
- 2025RouterEval: A Comprehensive Benchmark for Routing LLMs to Explore Model-level Scaling Up in LLMscited by 61
- 2023Fast Graph Condensation with Structure-based Neural Tangent Kernelcited by 36
- 2024Graph Machine Learning in the Era of Large Language Models (LLMs)cited by 33
- 2025CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agentcited by 25
- 2023A Survey on Fairness-aware Recommender Systemscited by 14
- 2024Fairness Definitions in Language Models Explainedcited by 11
- 2023Multi-agent Attacks for Black-box Social Recommendationscited by 9
- 2026In Agents We Trust, but Who Do Agents Trust? Latent Source Preferences Steer LLM Generationscited by 6
20 more
- 2025Exposing Privacy Risks in Graph Retrieval-Augmented Generationcited by 5
- 2024ToDA: Target-oriented Diffusion Attacker against Recommendation Systemcited by 4
- 2025Fidelity-Aware Recommendation Explanations via Stochastic Path Integrationcited by 3
- 2026From Hidden Profiles to Governable Personalization: Recommender Systems in the Age of LLM Agentscited by 3
- 2024Privacy in LLM-based Recommendation: Recent Advances and Future Directionscited by 2
- 2024Joint Universal Adversarial Perturbations with Interpretationscited by 2
- 2025Exposing Citation Vulnerabilities in Generative Enginescited by 2
- 2026RobustExplain: Evaluating Robustness of LLM-Based Explanation Agents for Recommendationcited by 2
- 2026With a Little Help From My Friends: Collective Manipulation in Risk-Controlling Recommender Systemscited by 2
- 2023Defense Against Model Extraction Attacks on Recommender Systemscited by 1
- 2024Marking the Pace: A Blockchain-Enhanced Privacy-Traceable Strategy for Federated Recommender Systemscited by 1
- 2025Prompt-Based LLMs for Position Bias-Aware Reranking in Personalized Recommendationscited by 1
- 2025Traceable Drug Recommendation over Medical Knowledge Graphscited by 1
- 2024Stability of Explainable Recommendationcited by 0
- 2024Fuzzy Norm-Explicit Product Quantization for Recommender Systemscited by 0
- 2025Shilling Recommender Systems by Generating Side-feature-aware Fake User Profilescited by 0
- 2026Debiasing Sequential Recommendation with Time-aware Inverse Propensity Scoringcited by 0
- 2026MedicalRec: Medical recommender system for image classification without retrainingcited by 0
- 2026Rethinking Fairness in LLM-Based Recommender Systems: A Surveycited by 0
- 2026RecToolBench: Benchmarking Recommendation-Specific Tool Orchestration under Fuzzy User Intentcited by 0
- 2026RecToolBench: Benchmarking Recommendation-Specific Tool Orchestration under Fuzzy User Intent25 Sep 2026
- 2026Rethinking Fairness in LLM-Based Recommender Systems: A Survey31 May 2026
- 2026MedicalRec: Medical recommender system for image classification without retraining23 May 2026
- 2026From Hidden Profiles to Governable Personalization: Recommender Systems in the Age of LLM Agents22 Apr 2026
- 2026With a Little Help From My Friends: Collective Manipulation in Risk-Controlling Recommender Systems30 Mar 2026
- 2026Debiasing Sequential Recommendation with Time-aware Inverse Propensity Scoring5 Mar 2026
- 2026In Agents We Trust, but Who Do Agents Trust? Latent Source Preferences Steer LLM Generations17 Feb 2026
- 2026RobustExplain: Evaluating Robustness of LLM-Based Explanation Agents for Recommendation27 Jan 2026
- 2025Fidelity-Aware Recommendation Explanations via Stochastic Path Integration22 Nov 2025
- 2025Traceable Drug Recommendation over Medical Knowledge Graphs31 Oct 2025
- 2025Exposing Citation Vulnerabilities in Generative Engines8 Oct 2025
- 2025Shilling Recommender Systems by Generating Side-feature-aware Fake User Profiles22 Sep 2025
20 more
- 2025Exposing Privacy Risks in Graph Retrieval-Augmented Generation24 Aug 2025
- 2025Prompt-Based LLMs for Position Bias-Aware Reranking in Personalized Recommendations8 May 2025
- 2025CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agent13 Apr 2025
- 2025RouterEval: A Comprehensive Benchmark for Routing LLMs to Explore Model-level Scaling Up in LLMs8 Mar 2025
- 2024Fuzzy Norm-Explicit Product Quantization for Recommender Systems8 Dec 2024
- 2024Joint Universal Adversarial Perturbations with Interpretations3 Aug 2024
- 2024Fairness Definitions in Language Models Explained26 Jul 2024
- 2024Marking the Pace: A Blockchain-Enhanced Privacy-Traceable Strategy for Federated Recommender Systems7 Jun 2024
- 2024Privacy in LLM-based Recommendation: Recent Advances and Future Directions3 Jun 2024
- 2024A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models10 May 2024
- 2024Stability of Explainable Recommendation3 May 2024
- 2024Graph Machine Learning in the Era of Large Language Models (LLMs)23 Apr 2024
- 2024ToDA: Target-oriented Diffusion Attacker against Recommendation System23 Jan 2024
- 2023Multi-agent Attacks for Black-box Social Recommendations13 Nov 2023
- 2023Defense Against Model Extraction Attacks on Recommender Systems25 Oct 2023
- 2023When MOE Meets LLMs: Parameter Efficient Fine-tuning for Multi-task Medical Applications21 Oct 2023
- 2023Fast Graph Condensation with Structure-based Neural Tangent Kernel17 Oct 2023
- 2023Recommender Systems in the Era of Large Language Models (LLMs)5 Jul 2023
- 2023A Survey on Fairness-aware Recommender Systems1 Jun 2023
- 2023Generative Diffusion Models on Graphs: Methods and Applications6 Feb 2023
- 2025CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agentcited by 25
- 2026In Agents We Trust, but Who Do Agents Trust? Latent Source Preferences Steer LLM Generationscited by 6
- 2026From Hidden Profiles to Governable Personalization: Recommender Systems in the Age of LLM Agentscited by 3
- 2026RobustExplain: Evaluating Robustness of LLM-Based Explanation Agents for Recommendationcited by 2
- 2026RecToolBench: Benchmarking Recommendation-Specific Tool Orchestration under Fuzzy User Intentcited by 0
- 2026RecToolBench: Benchmarking Recommendation-Specific Tool Orchestration under Fuzzy User Intent25 Sep 2026
- 2026From Hidden Profiles to Governable Personalization: Recommender Systems in the Age of LLM Agents22 Apr 2026
- 2026In Agents We Trust, but Who Do Agents Trust? Latent Source Preferences Steer LLM Generations17 Feb 2026
- 2026RobustExplain: Evaluating Robustness of LLM-Based Explanation Agents for Recommendation27 Jan 2026
- 2025CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agent13 Apr 2025
- 2023Recommender Systems in the Era of Large Language Models (LLMs)cited by 189
- 2025RouterEval: A Comprehensive Benchmark for Routing LLMs to Explore Model-level Scaling Up in LLMscited by 61
- 2023Fast Graph Condensation with Structure-based Neural Tangent Kernelcited by 36
- 2024Graph Machine Learning in the Era of Large Language Models (LLMs)cited by 33
- 2023A Survey on Fairness-aware Recommender Systemscited by 14
- 2024Fairness Definitions in Language Models Explainedcited by 11
- 2023Multi-agent Attacks for Black-box Social Recommendationscited by 9
- 2025Fidelity-Aware Recommendation Explanations via Stochastic Path Integrationcited by 3
- 2024Privacy in LLM-based Recommendation: Recent Advances and Future Directionscited by 2
- 2024Joint Universal Adversarial Perturbations with Interpretationscited by 2
- 2025Exposing Citation Vulnerabilities in Generative Enginescited by 2
- 2026With a Little Help From My Friends: Collective Manipulation in Risk-Controlling Recommender Systemscited by 2
12 most cited of 21 All 21 (JSON)
- 2026MedicalRec: Medical recommender system for image classification without retraining23 May 2026
- 2026With a Little Help From My Friends: Collective Manipulation in Risk-Controlling Recommender Systems30 Mar 2026
- 2026Debiasing Sequential Recommendation with Time-aware Inverse Propensity Scoring5 Mar 2026
- 2025Fidelity-Aware Recommendation Explanations via Stochastic Path Integration22 Nov 2025
- 2025Traceable Drug Recommendation over Medical Knowledge Graphs31 Oct 2025
- 2025Exposing Citation Vulnerabilities in Generative Engines8 Oct 2025
- 2025Shilling Recommender Systems by Generating Side-feature-aware Fake User Profiles22 Sep 2025
- 2025Prompt-Based LLMs for Position Bias-Aware Reranking in Personalized Recommendations8 May 2025
- 2025RouterEval: A Comprehensive Benchmark for Routing LLMs to Explore Model-level Scaling Up in LLMs8 Mar 2025
- 2024Fuzzy Norm-Explicit Product Quantization for Recommender Systems8 Dec 2024
- 2024Joint Universal Adversarial Perturbations with Interpretations3 Aug 2024
- 2024Fairness Definitions in Language Models Explained26 Jul 2024
12 newest of 21 All 21 (JSON)