PANORAMA: A synthetic PII-laced dataset for studying sensitive data memorization in LLMs
Not on the map. Why?
Abstract (arXiv)
The memorization of sensitive and personally identifiable information (PII) by large language models (LLMs) poses growing privacy risks as models scale and are increasingly deployed in real-world applications. Existing efforts to study sensitive and PII data memorization and develop mitigation strategies are hampered by the absence of comprehensive, realistic, and ethically sourced datasets reflecting the diversity of sensitive information found on the web. We introduce PANORAMA - Profile-based Assemblage for Naturalistic Online Representation and Attribute Memorization Analysis, a large-scale synthetic corpus of 384,789 samples derived from 9,674 synthetic profiles designed to closely emulate the distribution, variety, and context of PII and sensitive data as it naturally occurs in online environments. Our data generation pipeline begins with the construction of internally consistent, multi-attribute human profiles using constrained selection to reflect real-world demographics such as education, health attributes, financial status, etc. Using a combination of zero-shot prompting and OpenAI o3-mini, we generate diverse content types - including wiki-style articles, social media posts, forum discussions, online reviews, comments, and marketplace listings - each embedding realistic, contextually appropriate PII and other sensitive information. We validate the utility of PANORAMA by fine-tuning the Mistral-7B model on 1x, 5x, 10x, and 25x data replication rates with a subset of data and measure PII memorization rates - revealing not only consistent increases with repetition but also variation across content types, highlighting PANORAMA's ability to model how memorization risks differ by context. Our dataset and code are publicly available, providing a much-needed resource for privacy risk assessment, model auditing, and the development of privacy-preserving LLMs.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 19 of its 28 references that are in the map. First posted on arXiv 18 May 2025.
Builds on
19 of 28 references.
References · 19
- 2024GPT-4o System Cardcited by 4,588
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2021Membership Inference Attacks From First Principlescited by 878
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2021Deduplicating Training Data Makes Language Models Bettercited by 714
- 2024Phi-4 Technical Reportcited by 711
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
- 2020When Machine Unlearning Jeopardizes Privacycited by 198
- 2024RedPajama: an Open Dataset for Training Large Language Modelscited by 182
7 more
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacycited by 82
- 2024Be like a Goldfish, Don't Memorize! Mitigating Memorization in Generative LLMscited by 50
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 41
- 2024A Synthetic Dataset for Personal Attribute Inferencecited by 36
- 2023Quantifying Association Capabilities of Large Language Models and Its Implications on Privacy Leakagecited by 28
- 2024PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMscited by 7
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2026WebPII: Benchmarking Visual PII Detection for Computer-Use Agentscited by 3
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearningcited by 2
- 2026Subject-level Inference for Realistic Text Anonymization Evaluationcited by 1
- 2026Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Datacited by 0
- 2026ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agentcited by 0
- 2026PANOPTICON: A PII-Based Assemblage of Naturalistic Output Tokens for Investigating Privacy Leakage Within LLM Context Windowcited by 0
- 2026PANOPTICON: A PII-Based Assemblage of Naturalistic Output Tokens for Investigating Privacy Leakage Within LLM Context Window17 Jul 2026
- 2026LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearning2 Jul 2026
- 2026ProfileFoundry: A Synthetic Person-Object Substrate for Privacy, Memory, and Tool-Use Evaluation in LLM Agent24 Jun 2026
- 2026Phantoms and Disclosures: A Statistical Framework for Auditing Privacy in Synthetic Data15 Jun 2026
- 2026Subject-level Inference for Realistic Text Anonymization Evaluation23 Apr 2026
- 2026WebPII: Benchmarking Visual PII Detection for Computer-Use Agents18 Mar 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026