Privacy-Aware Visual Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
As Visual Language Models (VLMs) become increasingly embedded in everyday applications, ensuring they can recognise and appropriately handle privacy-sensitive content is thus essential to protect users. To this end, we conduct a comprehensive evaluation of twelve state-of-the-art VLMs and identify limitations in their understanding of visual privacy. However, existing privacy-related datasets often suffer from label inconsistencies, limiting their reliability. To address this, we introduce two compact, high-quality benchmarks, PrivBench and PrivBench-H, that focus on commonly recognised visual privacy categories aligned with the General Data Protection Regulation (GDPR). Additionally, we present PrivTune, an instruction-tuning dataset specifically curated to improve privacy sensitivity. We obtain multiple Privacy VLMs by fine-tuning off-the-shelf VLMs on only a few hundred samples from PrivTune, which leads to substantial gains on all benchmarks, surpassing even GPT-4, while maintaining strong performance on other tasks. Our findings show that privacy-awareness in VLMs can be substantially improved with minimal data and careful dataset design, setting the stage for safer, more privacy-aligned AI systems.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 57 of its 85 references that are in the map. First posted on arXiv 27 May 2024.
Builds on
57 of 85 references.
Closest ancestors · 1
Same direction, newest first
Other references · 56
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Visual Instruction Tuningcited by 7,792
- 2020End-to-End Object Detection with Transformerscited by 7,384
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
38 more
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2016Deep Learning with Differential Privacycited by 2,682
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,881
- 2023Evaluating Object Hallucination in Large Vision-Language Modelscited by 1,696
- 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2018Datasheets for Datasetscited by 1,371
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Conceptual 12M: Pushing Web-Scale Image-Text Pre-Training To Recognize Long-Tail Visual Conceptscited by 1,209
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,000
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 704
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2023CogAgent: A Visual Language Model for GUI Agentscited by 692
- 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 657
- 2023Bias and Fairness in Large Language Models: A Surveycited by 626
- 2023MiniGPT-v2: large language model as a unified interface for vision-language multi-task learningcited by 617
- 2023Otter: A Multi-Modal Model with In-Context Instruction Tuningcited by 548
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2024MoE-LLaVA: Mixture of Experts for Large Vision-Language Modelscited by 298
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 295
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2023MIMIC-IT: Multi-Modal In-Context Instruction Tuningcited by 264
- 2019Human uncertainty makes classification more robustcited by 231
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 218
- 2018Do CIFAR-10 Classifiers Generalize to CIFAR-10?cited by 197
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 167
- 2024TinyLLaVA: A Framework of Small-scale Large Multimodal Modelscited by 164
- 2023Copyright Violations and Large Language Modelscited by 108
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2024: 2; 2025: 7; 2026: 3.
12 papers.
- 2024AutoTrust: Benchmarking Trustworthiness in Large Vision Language Models for Autonomous Drivingcited by 35
- 2025Same Content, Different Answers: Cross-Modal Inconsistency in MLLMscited by 7
- 2025DREAM: Disentangling Risks to Enhance Safety Alignment in Multimodal Large Language Modelscited by 6
- 2025Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Modelscited by 6
- 2024BIV-Priv-Seg: Locating Private Content in Images Taken by People With Visual Impairmentscited by 5
- 2025MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Modelscited by 5
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agentscited by 2
- 2025Privacy-Preserving Semantic Segmentation from Ultra-Low-Resolution RGB Inputscited by 1
- 2025The impact of abstract and object tags on image privacy classificationcited by 0
- 2025Hierarchical Instance Tracking to Balance Privacy Preservation with Accessible Informationcited by 0
- 2026PrivLEX: Detecting legal concepts in images through Vision-Language Modelscited by 0
- 2026AVA-VLM: Adaptive Visual Attention-Vision Language Model for In-the-Wild Construction Site Monitoringcited by 0
- 2026AVA-VLM: Adaptive Visual Attention-Vision Language Model for In-the-Wild Construction Site Monitoring7 Jul 2026
- 2026PrivLEX: Detecting legal concepts in images through Vision-Language Models14 Jan 2026
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agents13 Jan 2026
- 2025Hierarchical Instance Tracking to Balance Privacy Preservation with Accessible Information10 Dec 2025
- 2025Same Content, Different Answers: Cross-Modal Inconsistency in MLLMs9 Dec 2025
- 2025MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Models21 Nov 2025
- 2025The impact of abstract and object tags on image privacy classification9 Oct 2025
- 2025Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models28 Sep 2025
- 2025Privacy-Preserving Semantic Segmentation from Ultra-Low-Resolution RGB Inputs21 Jul 2025
- 2025DREAM: Disentangling Risks to Enhance Safety Alignment in Multimodal Large Language Models25 Apr 2025
- 2024AutoTrust: Benchmarking Trustworthiness in Large Vision Language Models for Autonomous Driving19 Dec 2024
- 2024BIV-Priv-Seg: Locating Private Content in Images Taken by People With Visual Impairments25 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2024The Phantom Menace: Unmasking Privacy Leakages in Vision-Language Models
- 2023Can Language Models be Instructed to Protect Personal Information?
- 2026Which private attributes do VLMs agree on and predict well?
- 2025On the Robustness of Vision-Language Models in Zero-shot Privacy Classification
- 2026Vision Language Model Helps Private Information De-Identification in Vision Data
- 2024Multi-PA: A Multi-perspective Benchmark on Privacy Assessment for Large Vision-Language Models
- 2026Seeing Without Exposing: Adaptive Privacy Control for Open-World, Context-Hungry MLLMs
- 2025Dual-Priv Pruning : Efficient Differential Private Fine-Tuning in Multimodal Large Language Models