CI-Bench: Benchmarking Contextual Integrity of AI Assistants on Synthetic Data
On the map: Synthetic data and self-improvement for LLMs → Privacy-preserving tabular data synthesis
Abstract (arXiv)
Advances in generative AI point towards a new era of personalized applications that perform diverse tasks on behalf of users. While general AI assistants have yet to fully emerge, their potential to share personal data raises significant privacy challenges. This paper introduces CI-Bench, a comprehensive synthetic benchmark for evaluating the ability of AI assistants to protect personal information during model inference. Leveraging the Contextual Integrity framework, our benchmark enables systematic assessment of information flow across important context dimensions, including roles, information types, and transmission principles. We present a novel, scalable, multi-step synthetic data pipeline for generating natural communications, including dialogues and emails. Unlike previous work with smaller, narrowly focused evaluations, we present a novel, scalable, multi-step data pipeline that synthetically generates natural communications, including dialogues and emails, which we use to generate 44 thousand test samples across eight domains. Additionally, we formulate and evaluate a naive AI assistant to demonstrate the need for further study and careful training towards personal assistant tasks. We envision CI-Bench as a valuable tool for guiding future language model development, deployment, system design, and dataset construction, ultimately contributing to the development of AI assistants that align with users' privacy expectations.
Key facts. Cited by 34 papers in the map (data through 7 Oct 2026). Placed in Privacy-preserving tabular data synthesis, one of 13 directions in Synthetic data and self-improvement for LLMs. Builds on 11 of its 22 references that are in the map. First posted on arXiv 20 Sep 2024.
Builds on
11 of 22 references.
References · 11
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2023Extending Context Window of Large Language Models via Positional Interpolationcited by 721
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 218
- 2024The Ethics of Advanced AI Assistantscited by 103
- 2023Memory Sandbox: Transparent and Interactive Memory Management for Conversational Agentscited by 36
- 2024Operationalizing Contextual Integrity in Privacy-Conscious Assistantscited by 36
- 2023Reflective Linguistic Programming (RLP): A Stepping Stone in Socially-Aware AGI (SocialAGI)cited by 16
- 2023SimplyRetrieve: A Private and Lightweight Retrieval-Centric Generative AI Toolcited by 6
Built on by
Citing papers per year: 2025: 11; 2026: 23.
34 papers.
Sort:
By area:
- 2025AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agentscited by 79
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 34
- 2025Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agentscited by 33
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learningcited by 30
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkerscited by 25
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoningcited by 16
- 2025Privacy Reasoning in Ambiguous Contextscited by 11
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
- 2026CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agentscited by 10
- 2026AI Agents May Always Fall for Prompt Injectionscited by 9
- 2025Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learningcited by 7
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system securitycited by 5
22 more
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2025Personalizing Agent Privacy Decisions via Logical Entailmentcited by 4
- 2026Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agentscited by 4
- 2026Need to Know: Contextual-Integrity-Grounded Query Rewriting for Privacy-Conscious LLM Delegationcited by 3
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agentscited by 2
- 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representationscited by 2
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agentscited by 2
- 2026Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?cited by 2
- 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversationscited by 2
- 2026PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systemscited by 1
- 2026IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contextscited by 1
- 2026SovereignNegotiation-Bench: Evaluating User-Owned Personal Agents In Delegated Bargaining Under Privacy, Consent, Evidence, And Institutional Pressurecited by 1
- 2026PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systemscited by 1
- 2026ContextLens: Modeling Imperfect Privacy and Safety Context for Legal Compliancecited by 0
- 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fictioncited by 0
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMscited by 0
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agentscited by 0
- 2026REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editingcited by 0
- 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignmentcited by 0
- 2026PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agentscited by 0
- 2026AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agentscited by 0
- 2026PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agentscited by 0
- 2026PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agents28 Sep 2026
- 2026AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents26 Sep 2026
- 2026PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents12 Sep 2026
- 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignment10 Aug 2026
- 2026REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editing6 Jul 2026
- 2026PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems6 Jul 2026
- 2026SovereignNegotiation-Bench: Evaluating User-Owned Personal Agents In Delegated Bargaining Under Privacy, Consent, Evidence, And Institutional Pressure2 Jul 2026
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents25 Jun 2026
- 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations22 Jun 2026
- 2026Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?22 Jun 2026
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agents19 Jun 2026
- 2026IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contexts6 Jun 2026
22 more
- 2026Need to Know: Contextual-Integrity-Grounded Query Rewriting for Privacy-Conscious LLM Delegation2 Jun 2026
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMs18 May 2026
- 2026Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents18 May 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026AI Agents May Always Fall for Prompt Injections17 May 2026
- 2026PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems15 May 2026
- 2026CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents23 Apr 2026
- 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fiction21 Apr 2026
- 2026ContextLens: Modeling Imperfect Privacy and Safety Context for Legal Compliance14 Apr 2026
- 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representations31 Mar 2026
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agents13 Jan 2026
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation18 Dec 2025
- 2025Personalizing Agent Privacy Decisions via Logical Entailment4 Dec 2025
- 2025Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agents22 Sep 2025
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning11 Aug 2025
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers18 Jun 2025
- 2025Privacy Reasoning in Ambiguous Contexts13 Jun 2025
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learning29 May 2025
- 2025Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning20 May 2025
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025
- 2025AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents12 Mar 2025
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliance24 Feb 2025
- 2025AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agentscited by 79
- 2025Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agentscited by 33
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
- 2026CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agentscited by 10
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system securitycited by 5
- 2025Personalizing Agent Privacy Decisions via Logical Entailmentcited by 4
- 2026Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agentscited by 4
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agentscited by 2
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agentscited by 2
- 2026Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?cited by 2
- 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversationscited by 2
- 2026PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systemscited by 1
12 most cited of 16 All 16 (JSON)
- 2026PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agents28 Sep 2026
- 2026PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents12 Sep 2026
- 2026PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systems6 Jul 2026
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents25 Jun 2026
- 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations22 Jun 2026
- 2026Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?22 Jun 2026
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agents19 Jun 2026
- 2026Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agents18 May 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systems15 May 2026
- 2026CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents23 Apr 2026
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agents13 Jan 2026
12 newest of 16 All 16 (JSON)
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learningcited by 30
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkerscited by 25
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoningcited by 16
- 2025Privacy Reasoning in Ambiguous Contextscited by 11
- 2025Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learningcited by 7
- 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fictioncited by 0
- 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fiction21 Apr 2026
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning11 Aug 2025
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers18 Jun 2025
- 2025Privacy Reasoning in Ambiguous Contexts13 Jun 2025
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learning29 May 2025
- 2025Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning20 May 2025
- 2026AI Agents May Always Fall for Prompt Injectionscited by 9
- 2026AI Agents May Always Fall for Prompt Injections17 May 2026
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 34
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2026Need to Know: Contextual-Integrity-Grounded Query Rewriting for Privacy-Conscious LLM Delegationcited by 3
- 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representationscited by 2
- 2026IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contextscited by 1
- 2026SovereignNegotiation-Bench: Evaluating User-Owned Personal Agents In Delegated Bargaining Under Privacy, Consent, Evidence, And Institutional Pressurecited by 1
- 2026ContextLens: Modeling Imperfect Privacy and Safety Context for Legal Compliancecited by 0
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMscited by 0
- 2026REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editingcited by 0
- 2026AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agentscited by 0
- 2026AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agents26 Sep 2026
- 2026REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editing6 Jul 2026
- 2026SovereignNegotiation-Bench: Evaluating User-Owned Personal Agents In Delegated Bargaining Under Privacy, Consent, Evidence, And Institutional Pressure2 Jul 2026
- 2026IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contexts6 Jun 2026
- 2026Need to Know: Contextual-Integrity-Grounded Query Rewriting for Privacy-Conscious LLM Delegation2 Jun 2026
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMs18 May 2026
- 2026ContextLens: Modeling Imperfect Privacy and Safety Context for Legal Compliance14 Apr 2026
- 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representations31 Mar 2026
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliance24 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2024Best Practices and Lessons Learned on Synthetic Data
- 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI
- 2026Reasoning-Driven Synthetic Data Generation and Evaluation
- 2026NodeSynth: Socially Aligned Synthetic Data for AI Evaluation
- 2025PersonaBench: Evaluating AI Models on Understanding Personal Information through Accessing (Synthetic) Private User Data
- 2025SynClaimEval: A Framework for Evaluating the Utility of Synthetic Data in Long-Context Claim Verification
- 2026Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Data
- 2025Semantically-Aware LLM Agent to Enhance Privacy in Conversational AI Services