PrivacyMind: Large Language Models Can Be Contextual Privacy Protection Learners
Not on the map. Why?
Abstract (arXiv)
The proliferation of Large Language Models (LLMs) has driven considerable interest in fine-tuning them with domain-specific data to create specialized language models. Nevertheless, such domain-specific fine-tuning data often contains contextually sensitive personally identifiable information (PII). Direct fine-tuning of LLMs on this data without privacy protection poses a risk of data leakage of sensitive PII during inference time. To address this challenge, we introduce Contextual Privacy Protection Language Models (PrivacyMind), a novel paradigm for fine-tuning LLMs that effectively injects domain-specific knowledge while safeguarding inference-time data privacy. Our work offers a theoretical analysis for model design and benchmarks various techniques such as corpus curation, penalty-based unlikelihood in training loss, instruction-based tuning, etc. Extensive experiments across diverse datasets and scenarios demonstrate the effectiveness of our approaches. In particular, instruction tuning with both positive and negative examples stands out as a promising method, effectively protecting private data while enhancing the model's knowledge. Our work underscores the potential for Large Language Models as robust contextual privacy protection learners. The complete code and data for the work can be found at https://github.com/Yijia-Xiao/PrivacyMind.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Builds on 38 of its 67 references that are in the map. First posted on arXiv 3 Oct 2023.
Builds on
38 of 67 references.
References · 38
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2022Large Language Models Encode Clinical Knowledgecited by 1,807
26 more
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,026
- 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 888
- 2023RWKV: Reinventing RNNs for the Transformer Eracited by 814
- 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 511
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2022Teaching language models to support answers with verified quotescited by 290
- 2023MedAlpaca -- An Open-Source Collection of Medical Conversational AI Models and Training Datacited by 282
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 278
- 2023Poisoning Language Models During Instruction Tuningcited by 254
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 208
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 179
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2023Controlled Text Generation with Natural Language Instructionscited by 87
- 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 67
- 2022Overcoming Catastrophic Forgetting in Zero-Shot Cross-Lingual Generationcited by 62
- 2021Selective Differential Privacy for Language Modelingcited by 61
- 2022Adversarial Training for High-Stakes Reliabilitycited by 60
- 2018Privacy-preserving Neural Representations of Textcited by 54
- 2023Privacy-Preserving Parameter-Efficient Fine-Tuning for Large Language Model Servicescited by 43
- 2023ChatGPT Evaluation on Sentence Level Relations: A Focus on Temporal, Causal, and Discourse Relationscited by 39
- 2023Enhancing Small Medical Learners with Privacy-preserving Contextual Promptingcited by 11
- 2023G2uardFL: Safeguarding Federated Learning Against Backdoor Attacks through Attributed Client Graph Clusteringcited by 9
Built on by
Citing papers per year: 2023: 1; 2024: 9; 2025: 2; 2026: 1.
13 papers.
Sort:
By area:
- 2024AgentReview: Exploring Peer Review Dynamics with LLM Agentscited by 92
- 2023Better to Ask in English: Cross-Lingual Evaluation of Large Language Models for Healthcare Queriescited by 82
- 2024Building Guardrails for Large Language Modelscited by 61
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 44
- 2024Privacy-Preserving Instructions for Aligning Large Language Modelscited by 34
- 2024MM-Soc: Benchmarking Multimodal Large Language Models in Social Media Platformscited by 26
- 2024MedHalu: Hallucinations in Responses to Healthcare Queries by Large Language Modelscited by 20
- 2024Recent Advancement of Emotion Cognition in Large Language Modelscited by 9
- 2025Safe-LLaVA: A Privacy-Preserving Vision-Language Dataset and Benchmark for Biometric Safetycited by 7
- 2024Towards Fair Graph Anomaly Detection: Problem, Benchmark Datasets, and Evaluationcited by 6
- 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directionscited by 5
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2026SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generation18 Mar 2026
- 2025Safe-LLaVA: A Privacy-Preserving Vision-Language Dataset and Benchmark for Biometric Safety29 Aug 2025
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025
- 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directions9 Dec 2024
- 2024MedHalu: Hallucinations in Responses to Healthcare Queries by Large Language Models29 Sep 2024
- 2024Recent Advancement of Emotion Cognition in Large Language Models20 Sep 2024
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)20 Jul 2024
- 2024AgentReview: Exploring Peer Review Dynamics with LLM Agents18 Jun 2024
- 2024Towards Fair Graph Anomaly Detection: Problem, Benchmark Datasets, and Evaluation25 Feb 2024
- 2024MM-Soc: Benchmarking Multimodal Large Language Models in Social Media Platforms21 Feb 2024
- 2024Privacy-Preserving Instructions for Aligning Large Language Models21 Feb 2024
- 2024Building Guardrails for Large Language Models2 Feb 2024
- 2024AgentReview: Exploring Peer Review Dynamics with LLM Agentscited by 92
- 2024AgentReview: Exploring Peer Review Dynamics with LLM Agents18 Jun 2024
- 2023Better to Ask in English: Cross-Lingual Evaluation of Large Language Models for Healthcare Queriescited by 82
- 2024MedHalu: Hallucinations in Responses to Healthcare Queries by Large Language Modelscited by 20
- 2024Recent Advancement of Emotion Cognition in Large Language Modelscited by 9
- 2024Towards Fair Graph Anomaly Detection: Problem, Benchmark Datasets, and Evaluationcited by 6
- 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directionscited by 5
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025
- 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directions9 Dec 2024
- 2024MedHalu: Hallucinations in Responses to Healthcare Queries by Large Language Models29 Sep 2024
- 2024Recent Advancement of Emotion Cognition in Large Language Models20 Sep 2024
- 2024Towards Fair Graph Anomaly Detection: Problem, Benchmark Datasets, and Evaluation25 Feb 2024
- 2023Better to Ask in English: Cross-Lingual Evaluation of Large Language Models for Healthcare Queries19 Oct 2023