mlsanityData to 7 Oct 2026

Privacy-Aware Visual Language Models

arXiv 2405.17423 ↗First posted 27 May 2024cs.CV cs.CLcited by 12

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

As Visual Language Models (VLMs) become increasingly embedded in everyday applications, ensuring they can recognise and appropriately handle privacy-sensitive content is thus essential to protect users. To this end, we conduct a comprehensive evaluation of twelve state-of-the-art VLMs and identify limitations in their understanding of visual privacy. However, existing privacy-related datasets often suffer from label inconsistencies, limiting their reliability. To address this, we introduce two compact, high-quality benchmarks, PrivBench and PrivBench-H, that focus on commonly recognised visual privacy categories aligned with the General Data Protection Regulation (GDPR). Additionally, we present PrivTune, an instruction-tuning dataset specifically curated to improve privacy sensitivity. We obtain multiple Privacy VLMs by fine-tuning off-the-shelf VLMs on only a few hundred samples from PrivTune, which leads to substantial gains on all benchmarks, surpassing even GPT-4, while maintaining strong performance on other tasks. Our findings show that privacy-awareness in VLMs can be substantially improved with minimal data and careful dataset design, setting the stage for safer, more privacy-aligned AI systems.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 57 of its 85 references that are in the map. First posted on arXiv 27 May 2024.

Builds on

57 of 85 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024Private Attribute Inference from Images with Vision-Language Models16 Apr

Other references · 56

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2023GPT-4 Technical Reportcited by 18,132
  4. 2022Training language models to follow instructions with human feedbackcited by 15,712
  5. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  6. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  7. 2023Visual Instruction Tuningcited by 7,792
  8. 2020End-to-End Object Detection with Transformerscited by 7,384
  9. 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
  10. 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
  11. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
  12. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
38 more
  1. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  2. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  3. 2016Deep Learning with Differential Privacycited by 2,682
  4. 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
  5. 2020Extracting Training Data from Large Language Modelscited by 2,144
  6. 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,881
  7. 2023Evaluating Object Hallucination in Large Vision-Language Modelscited by 1,696
  8. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
  9. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
  10. 2018Datasheets for Datasetscited by 1,371
  11. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  12. 2021Conceptual 12M: Pushing Web-Scale Image-Text Pre-Training To Recognize Long-Tail Visual Conceptscited by 1,209
  13. 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
  14. 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,000
  15. 2022Quantifying Memorization Across Neural Language Modelscited by 755
  16. 2021Deduplicating Training Data Makes Language Models Bettercited by 705
  17. 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 704
  18. 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
  19. 2023CogAgent: A Visual Language Model for GUI Agentscited by 692
  20. 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 657
  21. 2023Bias and Fairness in Large Language Models: A Surveycited by 626
  22. 2023MiniGPT-v2: large language model as a unified interface for vision-language multi-task learningcited by 617
  23. 2023Otter: A Multi-Modal Model with In-Context Instruction Tuningcited by 548
  24. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
  25. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
  26. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
  27. 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
  28. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
  29. 2024MoE-LLaVA: Mixture of Experts for Large Vision-Language Modelscited by 298
  30. 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 295
  31. 2023Low-Resource Languages Jailbreak GPT-4cited by 290
  32. 2023MIMIC-IT: Multi-Modal In-Context Instruction Tuningcited by 264
  33. 2019Human uncertainty makes classification more robustcited by 231
  34. 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 218
  35. 2018Do CIFAR-10 Classifiers Generalize to CIFAR-10?cited by 197
  36. 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 167
  37. 2024TinyLLaVA: A Framework of Small-scale Large Multimodal Modelscited by 164
  38. 2023Copyright Violations and Large Language Modelscited by 108

50 most cited of 56 All 56 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 2; 2025: 7; 2026: 3.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2024The Phantom Menace: Unmasking Privacy Leakages in Vision-Language Models
  2. 2023Can Language Models be Instructed to Protect Personal Information?
  3. 2026Which private attributes do VLMs agree on and predict well?
  4. 2025On the Robustness of Vision-Language Models in Zero-shot Privacy Classification
  5. 2026Vision Language Model Helps Private Information De-Identification in Vision Data
  6. 2024Multi-PA: A Multi-perspective Benchmark on Privacy Assessment for Large Vision-Language Models
  7. 2026Seeing Without Exposing: Adaptive Privacy Control for Open-World, Context-Hungry MLLMs
  8. 2025Dual-Priv Pruning : Efficient Differential Private Fine-Tuning in Multimodal Large Language Models