mlsanityData to 14 Oct 2026

PANORAMA: A synthetic PII-laced dataset for studying sensitive data memorization in LLMs

arXiv 2505.12238 ↗First posted 18 May 2025cs.CL cs.AIcited by 7

Not on the map. Why?

Abstract (arXiv)

The memorization of sensitive and personally identifiable information (PII) by large language models (LLMs) poses growing privacy risks as models scale and are increasingly deployed in real-world applications. Existing efforts to study sensitive and PII data memorization and develop mitigation strategies are hampered by the absence of comprehensive, realistic, and ethically sourced datasets reflecting the diversity of sensitive information found on the web. We introduce PANORAMA - Profile-based Assemblage for Naturalistic Online Representation and Attribute Memorization Analysis, a large-scale synthetic corpus of 384,789 samples derived from 9,674 synthetic profiles designed to closely emulate the distribution, variety, and context of PII and sensitive data as it naturally occurs in online environments. Our data generation pipeline begins with the construction of internally consistent, multi-attribute human profiles using constrained selection to reflect real-world demographics such as education, health attributes, financial status, etc. Using a combination of zero-shot prompting and OpenAI o3-mini, we generate diverse content types - including wiki-style articles, social media posts, forum discussions, online reviews, comments, and marketplace listings - each embedding realistic, contextually appropriate PII and other sensitive information. We validate the utility of PANORAMA by fine-tuning the Mistral-7B model on 1x, 5x, 10x, and 25x data replication rates with a subset of data and measure PII memorization rates - revealing not only consistent increases with repetition but also variation across content types, highlighting PANORAMA's ability to model how memorization risks differ by context. Our dataset and code are publicly available, providing a much-needed resource for privacy risk assessment, model auditing, and the development of privacy-preserving LLMs.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 19 of its 28 references that are in the map. First posted on arXiv 18 May 2025.

Builds on

19 of 28 references.

References · 19

  1. 2024GPT-4o System Cardcited by 4,588
  2. 2016Pointer Sentinel Mixture Modelscited by 3,096
  3. 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
  4. 2020Extracting Training Data from Large Language Modelscited by 2,189
  5. 2021Membership Inference Attacks From First Principlescited by 878
  6. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  7. 2021Deduplicating Training Data Makes Language Models Bettercited by 714
  8. 2024Phi-4 Technical Reportcited by 711
  9. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  10. 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
  11. 2020When Machine Unlearning Jeopardizes Privacycited by 198
  12. 2024RedPajama: an Open Dataset for Training Large Language Modelscited by 182
7 more
  1. 2022The Privacy Onion Effect: Memorization is Relativecited by 136
  2. 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacycited by 82
  3. 2024Be like a Goldfish, Don't Memorize! Mitigating Memorization in Generative LLMscited by 50
  4. 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 41
  5. 2024A Synthetic Dataset for Personal Attribute Inferencecited by 36
  6. 2023Quantifying Association Capabilities of Large Language Models and Its Implications on Privacy Leakagecited by 28
  7. 2024PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMscited by 7

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 7.

7 papers.