Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Language model (LM) agents that act on users' behalf for personal tasks (e.g., replying emails) can boost productivity, but are also susceptible to unintended privacy leakage risks. We present the first study on people's capacity to oversee the privacy implications of the LM agents. By conducting a task-based survey (N=300), we investigate how people react to and assess the response generated by LM agents for asynchronous interpersonal communication tasks, compared with a response they wrote. We found that people may favor the agent response with more privacy leakage over the response they drafted or consider both good, leading to an increased harmful disclosure from 15.7% to 55.0%. We further identified six privacy behavior patterns reflecting varying concerns, trust levels, and privacy preferences underlying people's oversight of LM agents' actions. Our findings shed light on designing agentic systems that enable privacy-preserving interactions and achieve bidirectional alignment on privacy preferences to help users calibrate trust.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 21 of its 74 references that are in the map. First posted on arXiv 2 Nov 2024.
Builds on
21 of 74 references.
Closest ancestors · 2
Same direction, newest first
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep
- 2023"It's a Fair Game", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents20 Sep
Other references · 19
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,947
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
- 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 631
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 467
- 2020Artificial Intelligence, Values and Alignmentcited by 448
- 2023Multi-Agent Collaboration: Harnessing the Power of Intelligent LLM Agentscited by 333
- 2020Effect of Confidence and Explanation on Accuracy and Trust Calibration in AI-Assisted Decision Makingcited by 281
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2024The Ethics of Advanced AI Assistantscited by 107
- 2024On scalable oversight with weak LLMs judging strong LLMscited by 99
7 more
- 2023Eliciting Human Preferences with Language Modelscited by 92
- 2021Everyday algorithm auditing: Understanding the power of everyday users in surfacing harmful algorithmic behaviorscited by 50
- 2024Operationalizing Contextual Integrity in Privacy-Conscious Assistantscited by 37
- 2024On the Quest for Effectiveness in Human Oversight: Interdisciplinary Perspectivescited by 28
- 2024Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theorycited by 18
- 2017The Feasibility of Dynamically Granted Permissions: Aligning Mobile Privacy with User Preferencescited by 9
- 2024AI Delegates with a Dual Focus: Ensuring Privacy and Strategic Self-Disclosurecited by 2
Built on by
Citing papers per year: 2025: 11; 2026: 3.
14 papers.
Sort:
By area:
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 96
- 2025UXAgent: An LLM Agent-Based Usability Testing Framework for Web Designcited by 40
- 2025Position: Privacy Is Not Just Memorization!cited by 17
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agentscited by 11
- 2025UXAgent: A System for Simulating Usability Testing of Web Design with LLM Agentscited by 10
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Datacited by 10
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
- 2026Comparing Human Oversight Strategies for Computer-Use Agentscited by 6
- 2025DPRF: A Generalizable Dynamic Persona Refinement Framework for Optimizing Behavior Alignment Between Personalized LLM Role-Playing Agents and Humanscited by 5
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3
- 2025Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agentscited by 1
- 2025User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarioscited by 1
- 2026ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure25 Aug 2026
- 2026Behavioral Transfer in AI Agents: Evidence and Privacy Implications21 Apr 2026
- 2026Comparing Human Oversight Strategies for Computer-Use Agents6 Apr 2026
- 2025User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarios23 Oct 2025
- 2025DPRF: A Generalizable Dynamic Persona Refinement Framework for Optimizing Behavior Alignment Between Personalized LLM Role-Playing Agents and Humans16 Oct 2025
- 2025Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agents6 Oct 2025
- 2025Position: Privacy Is Not Just Memorization!2 Oct 2025
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing26 Sep 2025
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Models16 Sep 2025
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data16 Aug 2025
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents24 Apr 2025
- 2025UXAgent: A System for Simulating Usability Testing of Web Design with LLM Agents13 Apr 2025
2 more
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 96
- 2025UXAgent: An LLM Agent-Based Usability Testing Framework for Web Designcited by 40
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agentscited by 11
- 2025UXAgent: A System for Simulating Usability Testing of Web Design with LLM Agentscited by 10
- 2026Comparing Human Oversight Strategies for Computer-Use Agentscited by 6
- 2025DPRF: A Generalizable Dynamic Persona Refinement Framework for Optimizing Behavior Alignment Between Personalized LLM Role-Playing Agents and Humanscited by 5
- 2026ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposurecited by 1
- 2026Behavioral Transfer in AI Agents: Evidence and Privacy Implicationscited by 0
- 2026ToolMinimize: Auditing and Rewriting LLM Agent Tool Calls to Minimize Privacy Exposure25 Aug 2026
- 2026Behavioral Transfer in AI Agents: Evidence and Privacy Implications21 Apr 2026
- 2026Comparing Human Oversight Strategies for Computer-Use Agents6 Apr 2026
- 2025DPRF: A Generalizable Dynamic Persona Refinement Framework for Optimizing Behavior Alignment Between Personalized LLM Role-Playing Agents and Humans16 Oct 2025
- 2025Toward a Human-Centered Evaluation Framework for Trustworthy LLM-Powered GUI Agents24 Apr 2025
- 2025UXAgent: A System for Simulating Usability Testing of Web Design with LLM Agents13 Apr 2025
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures12 Mar 2025
- 2025UXAgent: An LLM Agent-Based Usability Testing Framework for Web Design18 Feb 2025
- 2025Position: Privacy Is Not Just Memorization!cited by 17
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Datacited by 10
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3
- 2025Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agentscited by 1
- 2025User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarioscited by 1
- 2025User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarios23 Oct 2025
- 2025Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agents6 Oct 2025
- 2025Position: Privacy Is Not Just Memorization!2 Oct 2025
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing26 Sep 2025
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Models16 Sep 2025
- 2025LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data16 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agents
- 2026Loose Lips: Understanding Privacy Leakage in Agentic Dialogue
- 2026NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents
- 2026PrivacyReasoner: Can LLM Emulate a Human-like Privacy Mind?
- 2025Measuring Physical-World Privacy Awareness of Large Language Models: An Evaluation Benchmark
- 2025Beyond Jailbreaking: Auditing Contextual Privacy in LLM Agents
- 2026Got a Secret? LLM Agents Can't Keep It: Evaluating Privacy in Multi-Agent Systems