Exploring Safety-Utility Trade-Offs in Personalized Language Models
Not on the map. Why?
Abstract (arXiv)
As large language models (LLMs) become increasingly integrated into daily applications, it is essential to ensure they operate fairly across diverse user demographics. In this work, we show that LLMs suffer from personalization bias, where their performance is impacted when they are personalized to a user's identity. We quantify personalization bias by evaluating the performance of LLMs along two axes - safety and utility. We measure safety by examining how benign LLM responses are to unsafe prompts with and without personalization. We measure utility by evaluating the LLM's performance on various tasks, including general knowledge, mathematical abilities, programming, and reasoning skills. We find that various LLMs, ranging from open-source models like Llama (Touvron et al., 2023) and Mistral (Jiang et al., 2023) to API-based ones like GPT-3.5 and GPT-4o (Ouyang et al., 2022), exhibit significant variance in performance in terms of safety-utility trade-offs depending on the user's identity. Finally, we discuss several strategies to mitigate personalization bias using preference tuning and prompt-based defenses.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). Builds on 55 of its 75 references that are in the map. First posted on arXiv 17 Jun 2024.
Builds on
55 of 75 references.
References · 55
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2021Program Synthesis with Large Language Modelscited by 3,637
- 2023Mistral 7Bcited by 3,164
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,218
- 2016Equality of Opportunity in Supervised Learningcited by 2,007
38 more
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2022Red Teaming Language Models with Language Modelscited by 1,026
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 924
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2018A Reductions Approach to Fair Classificationcited by 587
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 541
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 455
- 2023LaMP: When Large Language Models Meet Personalizationcited by 437
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
- 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 360
- 2019Deep Learning Recommendation Model for Personalization and Recommendation Systemscited by 327
- 2019Mitigating Gender Bias in Natural Language Processing: Literature Reviewcited by 287
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2024Two Tales of Persona in LLMs: A Survey of Role-Playing and Personalizationcited by 208
- 2023Marked Personas: Using Natural Language Prompts to Measure Stereotypes in Language Modelscited by 207
- 2019Gender Bias in Contextualized Word Embeddingscited by 203
- 2021Societal Biases in Language Generation: Progress and Challengescited by 202
- 2023Bias Runs Deep: Implicit Reasoning Biases in Persona-Assigned LLMscited by 199
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2024GSM-Plus: A Comprehensive Benchmark for Evaluating the Robustness of LLMs as Mathematical Problem Solverscited by 158
- 2023In-Context Impersonation Reveals Large Language Models' Strengths and Biasescited by 155
- 2023Is ChatGPT Fair for Recommendation? Evaluating Fairness in Large Language Model Recommendationcited by 114
- 2019On Measuring and Mitigating Biased Inferences of Word Embeddingscited by 112
- 2021Debiasing Pre-trained Contextualised Embeddingscited by 107
- 2023PALR: Personalization Aware LLMs for Recommendationcited by 96
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 92
- 2024Evaluating Large Language Model Biases in Persona-Steered Generationcited by 78
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 62
- 2019Generating Personalized Recipes from Historical User Preferencescited by 53
- 2022Kernelized Concept Erasurecited by 48
- 2024A Safe Harbor for AI Evaluation and Red Teamingcited by 47
- 2024Personalized Large Language Modelscited by 44
- 2023Are Personalized Stochastic Parrots More Dangerous? Evaluating Persona Biases in Dialogue Systemscited by 37
- 2024Gradient-Based Language Model Red Teamingcited by 34
- 2021Uncovering Implicit Gender Bias in Narratives through Commonsense Inferencecited by 32
- 2019Towards Controllable and Personalized Review Generationcited by 24
- 2018Compact Personalized Models for Neural Machine Translationcited by 19
50 most cited of 55 All 55 (JSON)
Built on by
Citing papers per year: 2025: 15; 2026: 12.
27 papers.
Sort:
By area:
- 2025A Survey of Personalized Large Language Models: Progress and Future Directionscited by 71
- 2025A Survey on Model Extraction Attacks and Defenses for Large Language Modelscited by 19
- 2025Persistent Personas? Role-Playing, Instruction Following, and Safety in Extended Interactionscited by 12
- 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AIcited by 12
- 2025The Invisible Hand: Unveiling Provider Bias in Large Language Models for Code Generationcited by 10
- 2025Is Safety Standard Same for Everyone? User-Specific Safety Evaluation of Large Language Modelscited by 10
- 2026One Persona, Many Cues, Different Results: How Sociodemographic Cues Impact LLM Personalizationcited by 9
- 2025The Power of Personality: A Human Simulation Perspective to Investigate Large Language Model Agentscited by 8
- 2025The Inadequacy of Offline LLM Evaluations: A Need to Account for Personalization in Model Behaviorcited by 8
- 2025The Rise of Darkness: Safety-Utility Trade-Offs in Role-Playing Dialogue Agentscited by 7
- 2025Keep Security! Benchmarking Security Policy Preservation in Large Language Model Contexts Against Indirect Attacks in Question Answeringcited by 5
- 2025Evaluating Large Language Models for Detecting Antisemitismcited by 3
15 more
- 2026When Personalization Misleads: Understanding and Mitigating Hallucinations in Personalized LLMscited by 3
- 2025From Anger to Joy: How Nationality Personas Shape Emotion Attribution in Large Language Modelscited by 2
- 2025Mind the Gap! Pathways Towards Unifying AI Safety and Ethics Researchcited by 2
- 2026Reflections and New Directions for Human-Centered Large Language Modelscited by 2
- 2026OpenSafeIntent: Evaluating Intent-Calibrated Safe Completion Across Dual-Use Prompt Setscited by 2
- 2026Identity-Robust Language Model Generation via Content Integrity Preservationcited by 1
- 2025The Dual-use Dilemma in LLMs: Do Empowering Ethical Capacities Make a Degraded Utility?cited by 0
- 2025Debiasing LLMs by Masking Unfairness-Driving Attention Headscited by 0
- 2026Compounding Disadvantage: Auditing Intersectional Bias in LLM-Generated Explanations Across Indian and American STEM Educationcited by 0
- 2026Large Language Models in Peer-Run Community Behavioral Health Services: Understanding Peer Specialists and Service Users' Perspectives on Opportunities, Risks, and Mitigation Strategiescited by 0
- 2026UGID: Unified Graph Isomorphism for Debiasing Large Language Modelscited by 0
- 2026Mitigating LLM biases toward spurious social contexts using direct preference optimizationcited by 0
- 2026TriAlign: Towards Universal Truth Consistency in Personalized LLM Alignmentcited by 0
- 2026SHARD: Safe and Helpful Alignment via Self-Reframing Distillationcited by 0
- 2026Who Pays More for Safety? Measuring the Disparate Cost of Safety Alignment across Languagescited by 0
- 2026Who Pays More for Safety? Measuring the Disparate Cost of Safety Alignment across Languages23 Aug 2026
- 2026OpenSafeIntent: Evaluating Intent-Calibrated Safe Completion Across Dual-Use Prompt Sets2 Jul 2026
- 2026SHARD: Safe and Helpful Alignment via Self-Reframing Distillation14 Jun 2026
- 2026TriAlign: Towards Universal Truth Consistency in Personalized LLM Alignment1 Jun 2026
- 2026Reflections and New Directions for Human-Centered Large Language Models7 May 2026
- 2026Mitigating LLM biases toward spurious social contexts using direct preference optimization2 Apr 2026
- 2026UGID: Unified Graph Isomorphism for Debiasing Large Language Models19 Mar 2026
- 2026Large Language Models in Peer-Run Community Behavioral Health Services: Understanding Peer Specialists and Service Users' Perspectives on Opportunities, Risks, and Mitigation Strategies9 Feb 2026
- 2026One Persona, Many Cues, Different Results: How Sociodemographic Cues Impact LLM Personalization26 Jan 2026
- 2026Compounding Disadvantage: Auditing Intersectional Bias in LLM-Generated Explanations Across Indian and American STEM Education20 Jan 2026
- 2026When Personalization Misleads: Understanding and Mitigating Hallucinations in Personalized LLMs16 Jan 2026
- 2026Identity-Robust Language Model Generation via Content Integrity Preservation14 Jan 2026
15 more
- 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI31 Dec 2025
- 2025Persistent Personas? Role-Playing, Instruction Following, and Safety in Extended Interactions14 Dec 2025
- 2025Mind the Gap! Pathways Towards Unifying AI Safety and Ethics Research10 Dec 2025
- 2025Debiasing LLMs by Masking Unfairness-Driving Attention Heads11 Oct 2025
- 2025Evaluating Large Language Models for Detecting Antisemitism22 Sep 2025
- 2025The Inadequacy of Offline LLM Evaluations: A Need to Account for Personalization in Model Behavior18 Sep 2025
- 2025A Survey on Model Extraction Attacks and Defenses for Large Language Models26 Jun 2025
- 2025From Anger to Joy: How Nationality Personas Shape Emotion Attribution in Large Language Models3 Jun 2025
- 2025Keep Security! Benchmarking Security Policy Preservation in Large Language Model Contexts Against Indirect Attacks in Question Answering21 May 2025
- 2025The Power of Personality: A Human Simulation Perspective to Investigate Large Language Model Agents28 Feb 2025
- 2025The Rise of Darkness: Safety-Utility Trade-Offs in Role-Playing Dialogue Agents28 Feb 2025
- 2025Is Safety Standard Same for Everyone? User-Specific Safety Evaluation of Large Language Models20 Feb 2025
- 2025A Survey of Personalized Large Language Models: Progress and Future Directions17 Feb 2025
- 2025The Dual-use Dilemma in LLMs: Do Empowering Ethical Capacities Make a Degraded Utility?20 Jan 2025
- 2025The Invisible Hand: Unveiling Provider Bias in Large Language Models for Code Generation14 Jan 2025
- 2026Mitigating LLM biases toward spurious social contexts using direct preference optimizationcited by 0
- 2026TriAlign: Towards Universal Truth Consistency in Personalized LLM Alignmentcited by 0
- 2026SHARD: Safe and Helpful Alignment via Self-Reframing Distillationcited by 0
- 2026Who Pays More for Safety? Measuring the Disparate Cost of Safety Alignment across Languagescited by 0
- 2026Who Pays More for Safety? Measuring the Disparate Cost of Safety Alignment across Languages23 Aug 2026
- 2026SHARD: Safe and Helpful Alignment via Self-Reframing Distillation14 Jun 2026
- 2026TriAlign: Towards Universal Truth Consistency in Personalized LLM Alignment1 Jun 2026
- 2026Mitigating LLM biases toward spurious social contexts using direct preference optimization2 Apr 2026
- 2025A Survey of Personalized Large Language Models: Progress and Future Directionscited by 71
- 2025A Survey on Model Extraction Attacks and Defenses for Large Language Modelscited by 19
- 2025Persistent Personas? Role-Playing, Instruction Following, and Safety in Extended Interactionscited by 12
- 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AIcited by 12
- 2025The Invisible Hand: Unveiling Provider Bias in Large Language Models for Code Generationcited by 10
- 2026One Persona, Many Cues, Different Results: How Sociodemographic Cues Impact LLM Personalizationcited by 9
- 2025The Inadequacy of Offline LLM Evaluations: A Need to Account for Personalization in Model Behaviorcited by 8
- 2025Keep Security! Benchmarking Security Policy Preservation in Large Language Model Contexts Against Indirect Attacks in Question Answeringcited by 5
- 2025Evaluating Large Language Models for Detecting Antisemitismcited by 3
- 2026When Personalization Misleads: Understanding and Mitigating Hallucinations in Personalized LLMscited by 3
- 2025From Anger to Joy: How Nationality Personas Shape Emotion Attribution in Large Language Modelscited by 2
- 2025Mind the Gap! Pathways Towards Unifying AI Safety and Ethics Researchcited by 2
12 most cited of 19 All 19 (JSON)
- 2026OpenSafeIntent: Evaluating Intent-Calibrated Safe Completion Across Dual-Use Prompt Sets2 Jul 2026
- 2026Reflections and New Directions for Human-Centered Large Language Models7 May 2026
- 2026UGID: Unified Graph Isomorphism for Debiasing Large Language Models19 Mar 2026
- 2026Large Language Models in Peer-Run Community Behavioral Health Services: Understanding Peer Specialists and Service Users' Perspectives on Opportunities, Risks, and Mitigation Strategies9 Feb 2026
- 2026One Persona, Many Cues, Different Results: How Sociodemographic Cues Impact LLM Personalization26 Jan 2026
- 2026Compounding Disadvantage: Auditing Intersectional Bias in LLM-Generated Explanations Across Indian and American STEM Education20 Jan 2026
- 2026When Personalization Misleads: Understanding and Mitigating Hallucinations in Personalized LLMs16 Jan 2026
- 2026Identity-Robust Language Model Generation via Content Integrity Preservation14 Jan 2026
- 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI31 Dec 2025
- 2025Persistent Personas? Role-Playing, Instruction Following, and Safety in Extended Interactions14 Dec 2025
- 2025Mind the Gap! Pathways Towards Unifying AI Safety and Ethics Research10 Dec 2025
- 2025Debiasing LLMs by Masking Unfairness-Driving Attention Heads11 Oct 2025
12 newest of 19 All 19 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Personalization Meets Safety:Mechanisms,Risks,and Mitigations in Personalized LLMs
- 2025Personalized Safety in LLMs: A Benchmark and A Planning-Based Agent Approach
- 2026Large Language Models Should Learn Personalized Rather Than Aggregated Human Preferences
- 2026Many Preferences, Few Policies: Towards Scalable Language Model Personalization
- 2024SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types
- 2025Evaluating Personalized Tool-Augmented LLMs from the Perspectives of Personalization and Proactivity
- 2026How Does Personalized Memory Shape LLM Behavior? Benchmarking Rational Preference Utilization in Personalized Assistants
- 2024Mitigating Exaggerated Safety in Large Language Models