Automating Governing Knowledge Commons and Contextual Integrity (GKC-CI) Privacy Policy Annotations with Large Language Models
Not on the map. Why?
Abstract (arXiv)
Identifying contextual integrity (CI) and governing knowledge commons (GKC) parameters in privacy policy texts can facilitate normative privacy analysis. However, GKC-CI annotation has heretofore required manual or crowdsourced effort. This paper demonstrates that high-accuracy GKC-CI parameter annotation of privacy policies can be performed automatically using large language models. We fine-tune 50 open-source and proprietary models on 21,588 ground truth GKC-CI annotations from 16 privacy policies. Our best performing model has an accuracy of 90.65%, which is comparable to the accuracy of experts on the same task. We apply our best performing model to 456 privacy policies from a variety of online services, demonstrating the effectiveness of scaling GKC-CI annotation for privacy policy exploration and analysis. We publicly release our model training code, training and testing data, an annotation visualizer, and all annotated policies for future GKC-CI research.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 30 of its 88 references that are in the map. First posted on arXiv 3 Nov 2023.
Builds on
30 of 88 references.
References · 30
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2020Longformer: The Long-Document Transformercited by 3,362
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
18 more
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2019Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AIcited by 1,543
- 2020Making Pre-trained Language Models Better Few-shot Learnerscited by 1,255
- 2021Train Short, Test Long: Attention with Linear Biases Enables Input Length Extrapolationcited by 1,085
- 2021Do Prompt-Based Models Really Understand the Meaning of their Prompts?cited by 324
- 2021How Many Data Points is a Prompt Worth?cited by 197
- 2023DISC-LawLLM: Fine-tuning Large Language Models for Intelligent Legal Servicescited by 117
- 2019Question Answering for Privacy Policies: Combining Computational and Legal Perspectivescited by 65
- 2018Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulationcited by 61
- 2018Polisis: Automated Analysis and Presentation of Privacy Policies Using Deep Learningcited by 50
- 2020Privacy Policies over Time: Curation and Analysis of a Million-Document Datasetcited by 28
- 2015Android Permissions Remystified: A Field Study on Contextual Integritycited by 15
- 2023Reformulating Domain Adaptation of Large Language Models as Adapt-Retrieve-Revise: A Case Study on Chinese Legal Domaincited by 12
- 2021Brittle AI, Causal Confusion, and Bad Mental Models: Challenges and Successes in the XAI Programcited by 11
- 2018Discovering Smart Home Internet of Things Privacy Norms Using Contextual Integritycited by 10
- 2019Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPAcited by 4
- 2022Privacy Policies Across the Ages: Content and Readability of Privacy Policies 1996--2021cited by 2
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026PrivPRISM: Automatically Detecting Discrepancies Between Google Play Data Safety Declarations and Developer Privacy Policiescited by 1
- 2026PrivSTRUCT: Untangling Data Purpose Compliance of Privacy Policies in Google Play Storecited by 0
- 2026A Systematic Evaluation of Traditional Privacy Policy Analysis Tools Against LLMscited by 0
- 2026A Systematic Evaluation of Traditional Privacy Policy Analysis Tools Against LLMs19 Jul 2026
- 2026PrivSTRUCT: Untangling Data Purpose Compliance of Privacy Policies in Google Play Store24 Apr 2026
- 2026PrivPRISM: Automatically Detecting Discrepancies Between Google Play Data Safety Declarations and Developer Privacy Policies10 Mar 2026