mlsanityData to 7 Oct 2026

CI-Bench: Benchmarking Contextual Integrity of AI Assistants on Synthetic Data

arXiv 2409.13903 ↗First posted 20 Sep 2024cs.AIcited by 34

On the map: Synthetic data and self-improvement for LLMs → Privacy-preserving tabular data synthesis

Abstract (arXiv)

Advances in generative AI point towards a new era of personalized applications that perform diverse tasks on behalf of users. While general AI assistants have yet to fully emerge, their potential to share personal data raises significant privacy challenges. This paper introduces CI-Bench, a comprehensive synthetic benchmark for evaluating the ability of AI assistants to protect personal information during model inference. Leveraging the Contextual Integrity framework, our benchmark enables systematic assessment of information flow across important context dimensions, including roles, information types, and transmission principles. We present a novel, scalable, multi-step synthetic data pipeline for generating natural communications, including dialogues and emails. Unlike previous work with smaller, narrowly focused evaluations, we present a novel, scalable, multi-step data pipeline that synthetically generates natural communications, including dialogues and emails, which we use to generate 44 thousand test samples across eight domains. Additionally, we formulate and evaluate a naive AI assistant to demonstrate the need for further study and careful training towards personal assistant tasks. We envision CI-Bench as a valuable tool for guiding future language model development, deployment, system design, and dataset construction, ultimately contributing to the development of AI assistants that align with users' privacy expectations.

Key facts. Cited by 34 papers in the map (data through 7 Oct 2026). Placed in Privacy-preserving tabular data synthesis, one of 13 directions in Synthetic data and self-improvement for LLMs. Builds on 11 of its 22 references that are in the map. First posted on arXiv 20 Sep 2024.

Builds on

11 of 22 references.

References · 11

  1. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
  2. 2020Extracting Training Data from Large Language Modelscited by 2,144
  3. 2023Extending Context Window of Large Language Models via Positional Interpolationcited by 721
  4. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
  5. 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
  6. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 218
  7. 2024The Ethics of Advanced AI Assistantscited by 103
  8. 2023Memory Sandbox: Transparent and Interactive Memory Management for Conversational Agentscited by 36
  9. 2024Operationalizing Contextual Integrity in Privacy-Conscious Assistantscited by 36
  10. 2023Reflective Linguistic Programming (RLP): A Stepping Stone in Socially-Aware AGI (SocialAGI)cited by 16
  11. 2023SimplyRetrieve: A Private and Lightweight Retrieval-Centric Generative AI Toolcited by 6

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 11; 2026: 23.

34 papers.

Sort:

By area:

  1. 2025AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agentscited by 79
  2. 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 34
  3. 2025Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agentscited by 33
  4. 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learningcited by 30
  5. 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkerscited by 25
  6. 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoningcited by 16
  7. 2025Privacy Reasoning in Ambiguous Contextscited by 11
  8. 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
  9. 2026CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agentscited by 10
  10. 2026AI Agents May Always Fall for Prompt Injectionscited by 9
  11. 2025Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learningcited by 7
  12. 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system securitycited by 5
22 more
  1. 2025Can Large Language Models Really Recognize Your Name?cited by 4
  2. 2025Personalizing Agent Privacy Decisions via Logical Entailmentcited by 4
  3. 2026Remembering More, Risking More: Longitudinal Safety Risks in Memory-Equipped LLM Agentscited by 4
  4. 2026Need to Know: Contextual-Integrity-Grounded Query Rewriting for Privacy-Conscious LLM Delegationcited by 3
  5. 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agentscited by 2
  6. 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representationscited by 2
  7. 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agentscited by 2
  8. 2026Capable but Careless: Do Computer-Use Agents Follow Contextual Integrity?cited by 2
  9. 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversationscited by 2
  10. 2026PrivScope: Task-scoped Disclosure Control for Hybrid Agentic Systemscited by 1
  11. 2026IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contextscited by 1
  12. 2026SovereignNegotiation-Bench: Evaluating User-Owned Personal Agents In Delegated Bargaining Under Privacy, Consent, Evidence, And Institutional Pressurecited by 1
  13. 2026PiSAs: Benchmarking Contextual Integrity in Multi-User Agentic Systemscited by 1
  14. 2026ContextLens: Modeling Imperfect Privacy and Safety Context for Legal Compliancecited by 0
  15. 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fictioncited by 0
  16. 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMscited by 0
  17. 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agentscited by 0
  18. 2026REDDIT: Forgetting-Resistant Correction of Timestamp Drift in ASR via Replay-Based Distribution Editingcited by 0
  19. 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignmentcited by 0
  20. 2026PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agentscited by 0
  21. 2026AgentTell: Behavioural Side-Channel Leakage in Browser-Use Agentscited by 0
  22. 2026PrivacySkills: How Privacy Guidance Shapes Source Selection in LLM Agentscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2024Best Practices and Lessons Learned on Synthetic Data
  2. 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI
  3. 2026Reasoning-Driven Synthetic Data Generation and Evaluation
  4. 2026NodeSynth: Socially Aligned Synthetic Data for AI Evaluation
  5. 2025PersonaBench: Evaluating AI Models on Understanding Personal Information through Accessing (Synthetic) Private User Data
  6. 2025SynClaimEval: A Framework for Evaluating the Utility of Synthetic Data in Long-Context Claim Verification
  7. 2026Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Data
  8. 2025Semantically-Aware LLM Agent to Enhance Privacy in Conversational AI Services