Position: Contextual Integrity is Inadequately Applied to Language Models
Not on the map. Why?
Abstract (arXiv)
Machine learning community is discovering Contextual Integrity (CI) as a useful framework to assess the privacy implications of large language models (LLMs). This is an encouraging development. The CI theory emphasizes sharing information in accordance with privacy norms and can bridge the social, legal, political, and technical aspects essential for evaluating privacy in LLMs. However, this is also a good point to reflect on use of CI for LLMs. This position paper argues that existing literature inadequately applies CI for LLMs without embracing the theory's fundamental tenets. Inadequate applications of CI could lead to incorrect conclusions and flawed privacy-preserving designs. We clarify the four fundamental tenets of CI theory, systematize prior work on whether they deviate from these tenets, and highlight overlooked issues in experimental hygiene for LLMs (e.g., prompt sensitivity, positional bias).
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). First posted on arXiv 31 Jan 2025.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2025: 6; 2026: 5.
11 papers.
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learningcited by 30
- 2026The Attack and Defense Landscape of Agentic AI: A Comprehensive Surveycited by 26
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkerscited by 25
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoningcited by 16
- 2026AI Agents May Always Fall for Prompt Injectionscited by 9
- 2025Revisiting Privacy, Utility, and Efficiency Trade-offs when Fine-Tuning Large Language Modelscited by 5
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2025Measuring Physical-World Privacy Awareness of Large Language Models: An Evaluation Benchmarkcited by 2
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agentscited by 0
- 2026An Investigation of the NeurIPS and ICML 2025 Position Trackscited by 0
- 2026"Nothing to See Here'': Unintended Disclosure through Revision Traces of LLM Deliverablescited by 0
- 2026"Nothing to See Here'': Unintended Disclosure through Revision Traces of LLM Deliverables28 Sep 2026
- 2026An Investigation of the NeurIPS and ICML 2025 Position Tracks6 Jul 2026
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents25 Jun 2026
- 2026AI Agents May Always Fall for Prompt Injections17 May 2026
- 2026The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey11 Mar 2026
- 2025Measuring Physical-World Privacy Awareness of Large Language Models: An Evaluation Benchmark27 Sep 2025
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning11 Aug 2025
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers18 Jun 2025
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learning29 May 2025
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025
- 2025Revisiting Privacy, Utility, and Efficiency Trade-offs when Fine-Tuning Large Language Models18 Feb 2025