A Synthetic Dataset for Personal Attribute Inference
On the map: Synthetic data and self-improvement for LLMs → Privacy-preserving tabular data synthesis
Abstract (arXiv)
Recently, powerful Large Language Models (LLMs) have become easily accessible to hundreds of millions of users world-wide. However, their strong capabilities and vast world knowledge do not come without associated privacy risks. In this work, we focus on the emerging privacy threat LLMs pose -- the ability to accurately infer personal information from online texts. Despite the growing importance of LLM-based author profiling, research in this area has been hampered by a lack of suitable public datasets, largely due to ethical and privacy concerns associated with real personal data. We take two steps to address this problem: (i) we construct a simulation framework for the popular social media platform Reddit using LLM agents seeded with synthetic personal profiles; (ii) using this framework, we generate SynthPAI, a diverse synthetic dataset of over 7800 comments manually labeled for personal attributes. We validate our dataset with a human study showing that humans barely outperform random guessing on the task of distinguishing our synthetic comments from real ones. Further, we verify that our dataset enables meaningful personal attribute inference research by showing across 18 state-of-the-art LLMs that our synthetic comments allow us to draw the same conclusions as real-world data. Combined, our experimental results, dataset and pipeline form a strong basis for future privacy-preserving research geared towards understanding and mitigating inference-based privacy threats that LLMs pose.
Key facts. Cited by 35 papers in the map (data through 7 Oct 2026). Placed in Privacy-preserving tabular data synthesis, one of 13 directions in Synthetic data and self-improvement for LLMs. Builds on 22 of its 61 references that are in the map. First posted on arXiv 11 Jun 2024.
Builds on
22 of 61 references.
References · 22
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2023Qwen Technical Reportcited by 3,273
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2023WizardLM: Empowering large pre-trained language models to follow complex instructionscited by 1,116
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2023Whose Opinions Do Language Models Reflect?cited by 759
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2024Yi: Open Foundation Models by 01.AIcited by 706
- 2022Language Models are Realistic Tabular Data Generatorscited by 290
- 2021Generating Datasets with Pretrained Language Modelscited by 192
- 2021GPT3Mix: Leveraging Large-scale Language Models for Text Augmentationcited by 185
10 more
- 2020Data Augmentation using Pre-trained Transformer Modelscited by 168
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 167
- 2023When Large Language Models contradict humans? Large Language Models' Sycophantic Behaviourcited by 61
- 2023LLM-powered Data Augmentation for Enhanced Cross-lingual Performancecited by 51
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
- 2017A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translationcited by 41
- 2024Private Attribute Inference from Images with Vision-Language Modelscited by 35
- 2024Large Language Models are Advanced Anonymizerscited by 22
- 2021Generating Synthetic Text Data to Evaluate Causal Inference Methodscited by 9
- 2023AI, write an essay for me: A large-scale comparison of human-written versus ChatGPT-generated essayscited by 9
Built on by
Citing papers per year: 2024: 4; 2025: 12; 2026: 19.
35 papers.
Sort:
By area:
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agentscited by 76
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 38
- 2024Textual Unlearning Gives a False Sense of Unlearningcited by 13
- 2025Automated Profile Inference with Language Model Agentscited by 9
- 2025A Tale of Two Identities: An Ethical Audit of Human and AI-Crafted Personascited by 8
- 2024Ads that Talk Back: Implications and Perceptions of Injecting Personalized Advertising into LLM Chatbotscited by 7
- 2025PANORAMA: A synthetic PII-laced dataset for studying sensitive data memorization in LLMscited by 6
- 2025Automated Privacy Information Annotation in Large Language Model Interactionscited by 6
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
- 2025Self-Refining Language Model Anonymizers via Adversarial Distillationcited by 4
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2026Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMscited by 3
23 more
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inferencecited by 2
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generationcited by 2
- 2025IP-Dialog: Evaluating Implicit Personalization in Dialogue Systems with Synthetic Datacited by 1
- 2025PETLP: A Privacy-by-Design Pipeline for Social Media Data in AI Researchcited by 1
- 2026Adaptive Text Anonymization: Learning Privacy-Utility Trade-offs via Prompt Optimizationcited by 1
- 2026RedacBench: Can AI Erase Your Secrets?cited by 1
- 2026Learning to Seek Help: Dynamic Collaboration Between Small and Large Language Modelscited by 1
- 2026Can LLM Agents Sustain Long-Horizon Organizational Dynamics?cited by 1
- 2025Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Modelscited by 0
- 2025RL-Finetuned LLMs for Privacy-Preserving Synthetic Rewritingcited by 0
- 2025Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Modelscited by 0
- 2026The Conundrum of Trustworthy Research on Attacking Personally Identifiable Information Removal Techniquescited by 0
- 2026Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agentscited by 0
- 2026MiroBench: Benchmarking Realism in Agentic Simulation of Real-world Discussionscited by 0
- 2026Attribute Inference from Interactive Targeted Adscited by 0
- 2026ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agentcited by 0
- 2026GRASP: Reinforcing Language Model Anonymizers with Group Relative Policy Optimizationcited by 0
- 2026CARD: Controlled Agentic Reddit Discussions for Credit Card Simulationcited by 0
- 2026AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inferencecited by 0
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalationcited by 0
- 2026GraphProfiler: Source-Linked Sensitive Attribute Inference via Personal Knowledge Graphscited by 0
- 2026Evaluating Personal Information Output from Conversational Interactions in Generative AI Systemscited by 0
- 2026LLMs as Linguistic Chameleons: Decoupling Semantics and Structure for Privacy-Preserving Communicationcited by 0
- 2026LLMs as Linguistic Chameleons: Decoupling Semantics and Structure for Privacy-Preserving Communication19 Sep 2026
- 2026GraphProfiler: Source-Linked Sensitive Attribute Inference via Personal Knowledge Graphs11 Sep 2026
- 2026Evaluating Personal Information Output from Conversational Interactions in Generative AI Systems1 Sep 2026
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalation29 Aug 2026
- 2026AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference13 Aug 2026
- 2026CARD: Controlled Agentic Reddit Discussions for Credit Card Simulation10 Aug 2026
- 2026GRASP: Reinforcing Language Model Anonymizers with Group Relative Policy Optimization6 Aug 2026
- 2026ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agent24 Jun 2026
- 2026Attribute Inference from Interactive Targeted Ads13 Jun 2026
- 2026Can LLM Agents Sustain Long-Horizon Organizational Dynamics?31 May 2026
- 2026MiroBench: Benchmarking Realism in Agentic Simulation of Real-world Discussions10 May 2026
- 2026Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agents7 May 2026
23 more
- 2026Learning to Seek Help: Dynamic Collaboration Between Small and Large Language Models20 Apr 2026
- 2026Private Seeds, Public LLMs: Realistic and Privacy-Preserving Synthetic Data Generation8 Apr 2026
- 2026The Conundrum of Trustworthy Research on Attacking Personally Identifiable Information Removal Techniques9 Mar 2026
- 2026RedacBench: Can AI Erase Your Secrets?2 Mar 2026
- 2026Adaptive Text Anonymization: Learning Privacy-Utility Trade-offs via Prompt Optimization24 Feb 2026
- 2026Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs12 Feb 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2025Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models29 Sep 2025
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Models16 Sep 2025
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inference15 Sep 2025
- 2025RL-Finetuned LLMs for Privacy-Preserving Synthetic Rewriting25 Aug 2025
- 2025PETLP: A Privacy-by-Design Pipeline for Social Media Data in AI Research12 Aug 2025
- 2025Retrieval-Confused Generation is a Good Defender for Privacy Violation Attack of Large Language Models24 Jun 2025
- 2025IP-Dialog: Evaluating Implicit Personalization in Dialogue Systems with Synthetic Data3 Jun 2025
- 2025Self-Refining Language Model Anonymizers via Adversarial Distillation2 Jun 2025
- 2025Automated Privacy Information Annotation in Large Language Model Interactions27 May 2025
- 2025Automated Profile Inference with Language Model Agents18 May 2025
- 2025PANORAMA: A synthetic PII-laced dataset for studying sensitive data memorization in LLMs18 May 2025
- 2025A Tale of Two Identities: An Ethical Audit of Human and AI-Crafted Personas7 May 2025
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agents4 Dec 2024
- 2024Ads that Talk Back: Implications and Perceptions of Injecting Personalized Advertising into LLM Chatbots23 Sep 2024
- 2024LLM-PBE: Assessing Data Privacy in Large Language Models23 Aug 2024
- 2024Textual Unlearning Gives a False Sense of Unlearning19 Jun 2024
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agentscited by 76
- 2025Automated Profile Inference with Language Model Agentscited by 9
- 2026Can LLM Agents Sustain Long-Horizon Organizational Dynamics?cited by 1
- 2026Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agentscited by 0
- 2026MiroBench: Benchmarking Realism in Agentic Simulation of Real-world Discussionscited by 0
- 2026ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agentcited by 0
- 2026CARD: Controlled Agentic Reddit Discussions for Credit Card Simulationcited by 0
- 2026CARD: Controlled Agentic Reddit Discussions for Credit Card Simulation10 Aug 2026
- 2026ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agent24 Jun 2026
- 2026Can LLM Agents Sustain Long-Horizon Organizational Dynamics?31 May 2026
- 2026MiroBench: Benchmarking Realism in Agentic Simulation of Real-world Discussions10 May 2026
- 2026Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agents7 May 2026
- 2025Automated Profile Inference with Language Model Agents18 May 2025
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agents4 Dec 2024
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 38
- 2025A Tale of Two Identities: An Ethical Audit of Human and AI-Crafted Personascited by 8
- 2024Ads that Talk Back: Implications and Perceptions of Injecting Personalized Advertising into LLM Chatbotscited by 7
- 2025PANORAMA: A synthetic PII-laced dataset for studying sensitive data memorization in LLMscited by 6
- 2025Automated Privacy Information Annotation in Large Language Model Interactionscited by 6
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
- 2025Self-Refining Language Model Anonymizers via Adversarial Distillationcited by 4
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2026Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMscited by 3
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inferencecited by 2
- 2025IP-Dialog: Evaluating Implicit Personalization in Dialogue Systems with Synthetic Datacited by 1
- 2025PETLP: A Privacy-by-Design Pipeline for Social Media Data in AI Researchcited by 1
12 most cited of 24 All 24 (JSON)
- 2026LLMs as Linguistic Chameleons: Decoupling Semantics and Structure for Privacy-Preserving Communication19 Sep 2026
- 2026GraphProfiler: Source-Linked Sensitive Attribute Inference via Personal Knowledge Graphs11 Sep 2026
- 2026Evaluating Personal Information Output from Conversational Interactions in Generative AI Systems1 Sep 2026
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalation29 Aug 2026
- 2026AccretionLink: On-Device Auditing of Exposure-Control Attacks on Attribute Inference13 Aug 2026
- 2026Attribute Inference from Interactive Targeted Ads13 Jun 2026
- 2026Learning to Seek Help: Dynamic Collaboration Between Small and Large Language Models20 Apr 2026
- 2026The Conundrum of Trustworthy Research on Attacking Personally Identifiable Information Removal Techniques9 Mar 2026
- 2026RedacBench: Can AI Erase Your Secrets?2 Mar 2026
- 2026Adaptive Text Anonymization: Learning Privacy-Utility Trade-offs via Prompt Optimization24 Feb 2026
- 2026Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs12 Feb 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
12 newest of 24 All 24 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Auditing M-LLMs for Privacy Risks: A Synthetic Benchmark and Evaluation Framework ↗
- 2025Privacy-Preserving Synthetic Review Generation with Diverse Writing Styles Using LLMs
- 2025Protecting Vulnerable Voices: Synthetic Dataset Generation for Self-Disclosure Detection
- 2024Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data
- 2025The Canary's Echo: Auditing Privacy Risks of LLM-Generated Synthetic Text
- 2025textttBluePrint: A Social Media User Dataset for LLM Persona Evaluation and Training
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data
- 2025When Ads Become Profiles: Uncovering the Invisible Risk of Web Advertising at Scale with LLMs