Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)
Not on the map. Why?
Abstract (arXiv)
System prompts in Large Language Models (LLMs) are predefined directives that guide model behaviour, taking precedence over user inputs in text processing and generation. LLM deployers increasingly use them to ensure consistent responses across contexts. While model providers set a foundation of system prompts, deployers and third-party developers can append additional prompts without visibility into others' additions, while this layered implementation remains entirely hidden from end-users. As system prompts become more complex, they can directly or indirectly introduce unaccounted for side effects. This lack of transparency raises fundamental questions about how the position of information in different directives shapes model outputs. As such, this work examines how the placement of information affects model behaviour. To this end, we compare how models process demographic information in system versus user prompts across six commercially available LLMs and 50 demographic groups. Our analysis reveals significant biases, manifesting in differences in user representation and decision-making scenarios. Since these variations stem from inaccessible and opaque system-level configurations, they risk representational, allocative and potential other biases and downstream harms beyond the user's ability to detect or correct. Our findings draw attention to these critical issues, which have the potential to perpetuate harms if left unexamined. Further, we argue that system prompt analysis must be incorporated into AI auditing processes, particularly as customisable system prompts become increasingly prevalent in commercial AI deployments.
Key facts. Cited by 19 papers in the map (data through 14 Oct 2026). Builds on 48 of its 99 references that are in the map. First posted on arXiv 27 May 2025.
Builds on
48 of 99 references.
References · 48
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2016Equality of Opportunity in Supervised Learningcited by 2,007
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 956
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 541
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
- 2020TweetEval: Unified Benchmark and Comparative Evaluation for Tweet Classificationcited by 417
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 412
- 2019On Measuring Social Biases in Sentence Encoderscited by 398
- 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 384
- 2023A Comprehensive Survey on Pretrained Foundation Models: A History from BERT to ChatGPTcited by 368
36 more
- 2023Bias Runs Deep: Implicit Reasoning Biases in Persona-Assigned LLMscited by 199
- 2019A Framework for Understanding Sources of Harm throughout the Machine Learning Life Cyclecited by 193
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 150
- 2022Sociotechnical Harms of Algorithmic Systems: Scoping a Taxonomy for Harm Reductioncited by 138
- 2023Evaluating and Mitigating Discrimination in Language Model Decisionscited by 124
- 2021Understanding and Evaluating Racial Biases in Image Captioningcited by 108
- 2022Human heuristics for AI-generated language are flawedcited by 105
- 2018A Unified Approach to Quantifying Algorithmic Unfairness: Measuring Individual & Group Unfairness via Inequality Indicescited by 97
- 2024Aligning to Thousands of Preferences via System Message Generalizationcited by 84
- 2020DynaSent: A Dynamic Benchmark for Sentiment Analysiscited by 63
- 2022Theories of "Gender" in NLP Bias Researchcited by 62
- 2017From Parity to Preference-based Notions of Fairness in Classificationcited by 60
- 2023"I'm fully who I am": Towards Centering Transgender and Non-Binary Voices to Measure Biases in Open Language Generationcited by 56
- 2024Measuring and Controlling Instruction (In)Stability in Language Model Dialogscited by 53
- 2023Who Audits the Auditors? Recommendations from a field scan of the algorithmic auditing ecosystemcited by 52
- 2023Bias Against 93 Stigmatized Groups in Masked Language Models and Downstream Sentiment Classification Taskscited by 51
- 2023Fine-tuning ChatGPT for Automatic Scoringcited by 51
- 2023You don't need a personality test to know these models are unreliable: Assessing the Reliability of Large Language Models on Psychometric Instrumentscited by 48
- 2023Understanding accountability in algorithmic supply chainscited by 40
- 2020What's Sex Got To Do With Fair Machine Learning?cited by 38
- 2022Dislocated Accountabilities in the AI Supply Chain: Modularity and Developers' Notions of Responsibilitycited by 33
- 2024Participation in the age of foundation modelscited by 32
- 2024Large Language Models Portray Socially Subordinate Groups as More Homogeneous, Consistent with a Bias Observed in Humanscited by 31
- 2024SysBench: Can Large Language Models Follow System Messages?cited by 28
- 2019Fairness in representation: quantifying stereotyping as a representational harmcited by 26
- 2024Do Generative AI Models Output Harm while Representing Non-Western Cultures: Evidence from A Community-Centered Approachcited by 26
- 2023Taxonomizing and Measuring Representational Harms: A Look at Image Taggingcited by 25
- 2021A Framework for Fairness: A Systematic Review of Existing Fair AI Solutionscited by 18
- 2024Beyond Behaviorist Representational Harms: A Plan for Measurement and Mitigationcited by 17
- 2024Do Large Language Models Rank Fairly? An Empirical Study on the Fairness of LLMs as Rankerscited by 17
- 2024Akal Badi ya Bias: An Exploratory Study of Gender Bias in Hindi Language Technologycited by 17
- 2023Out of Context: Investigating the Bias and Fairness Concerns of "Artificial Intelligence as a Service"cited by 15
- 2024RelayAttention for Efficient Large Language Model Serving with Long System Promptscited by 13
- 2024How Are LLMs Mitigating Stereotyping Harms? Learning from Search Engine Studiescited by 10
- 2024The Impact of Inference Acceleration on Bias of LLMscited by 9
- 2024On LLM Wizards: Identifying Large Language Models' Behaviors for Wizard of Oz Experimentscited by 4
Built on by
Citing papers per year: 2025: 3; 2026: 16.
19 papers.
Sort:
By area:
- 2025The Pitfalls of KV Cache Compressioncited by 15
- 2026Estimating Tail Risks in Language Model Output Distributionscited by 9
- 2025A Taxonomy of Prompt Defects in LLM Systemscited by 8
- 2026Steering to Say No: Configurable Refusal via Activation Steering in Vision Language Modelscited by 3
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequencescited by 3
- 2026Scaffold, Not Vocabulary? A Controlled, Two-Tier, Pre-Registered Study of a Popperian Code-Generation Skillcited by 3
- 2026Reflect: Transparent Principle-Guided Reasoning for Constitutional Alignment at Scalecited by 2
- 2026Evaluating Monolingual and Multilingual Large Language Models for Greek Question Answering: The DemosQA Benchmarkcited by 2
- 2026When Persona Attributes Improve Population Alignment in Large Language Modelscited by 2
- 2025Specification and Detection of LLM Code Smellscited by 0
- 2026When Identity Overrides Incentives: Representational Choices as Governance Decisions in Multi-Agent LLM Systemscited by 0
- 2026Who Does What? Archetypes of Roles Assigned to LLMs During Human-AI Decision-Makingcited by 0
7 more
- 2026When AI Writes, Whose Voice Remains? Quantifying Cultural Marker Erasure Across World English Varieties in Large Language Modelscited by 0
- 2026Strengthening Human-Centric Chain-of-Thought Reasoning Integrity in LLMs via a Structured Prompt Frameworkcited by 0
- 2026Policy-Governed LLM Routing with Intent Matching for Instrument Laboratoriescited by 0
- 2026Modularizing Educational LLM-Agency for Fostering Responsible Learning Assistancecited by 0
- 2026AuAu: A Benchmark for Auditing Authoritarian Alignment in Large Language Modelscited by 0
- 2026Defeat Devices in AI Systemscited by 0
- 2026The System Prompt Illusion: How Instruction Preambles Modify Computation in Language Modelscited by 0
- 2026The System Prompt Illusion: How Instruction Preambles Modify Computation in Language Models23 Sep 2026
- 2026When Persona Attributes Improve Population Alignment in Large Language Models2 Sep 2026
- 2026Defeat Devices in AI Systems27 Jun 2026
- 2026AuAu: A Benchmark for Auditing Authoritarian Alignment in Large Language Models15 Jun 2026
- 2026Scaffold, Not Vocabulary? A Controlled, Two-Tier, Pre-Registered Study of a Popperian Code-Generation Skill4 Jun 2026
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences2 Jun 2026
- 2026Modularizing Educational LLM-Agency for Fostering Responsible Learning Assistance28 May 2026
- 2026Estimating Tail Risks in Language Model Output Distributions24 Apr 2026
- 2026Strengthening Human-Centric Chain-of-Thought Reasoning Integrity in LLMs via a Structured Prompt Framework6 Apr 2026
- 2026Policy-Governed LLM Routing with Intent Matching for Instrument Laboratories3 Apr 2026
- 2026When AI Writes, Whose Voice Remains? Quantifying Cultural Marker Erasure Across World English Varieties in Large Language Models25 Feb 2026
- 2026Evaluating Monolingual and Multilingual Large Language Models for Greek Question Answering: The DemosQA Benchmark18 Feb 2026
7 more
- 2026Who Does What? Archetypes of Roles Assigned to LLMs During Human-AI Decision-Making12 Feb 2026
- 2026Steering to Say No: Configurable Refusal via Activation Steering in Vision Language Models31 Jan 2026
- 2026Reflect: Transparent Principle-Guided Reasoning for Constitutional Alignment at Scale26 Jan 2026
- 2026When Identity Overrides Incentives: Representational Choices as Governance Decisions in Multi-Agent LLM Systems15 Jan 2026
- 2025Specification and Detection of LLM Code Smells19 Dec 2025
- 2025The Pitfalls of KV Cache Compression30 Sep 2025
- 2025A Taxonomy of Prompt Defects in LLM Systems17 Sep 2025
- 2025The Pitfalls of KV Cache Compressioncited by 15
- 2025The Pitfalls of KV Cache Compression30 Sep 2025
- 2026Estimating Tail Risks in Language Model Output Distributions24 Apr 2026
- 2025A Taxonomy of Prompt Defects in LLM Systemscited by 8
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequencescited by 3
- 2026Scaffold, Not Vocabulary? A Controlled, Two-Tier, Pre-Registered Study of a Popperian Code-Generation Skillcited by 3
- 2026Evaluating Monolingual and Multilingual Large Language Models for Greek Question Answering: The DemosQA Benchmarkcited by 2
- 2026When Persona Attributes Improve Population Alignment in Large Language Modelscited by 2
- 2025Specification and Detection of LLM Code Smellscited by 0
- 2026Who Does What? Archetypes of Roles Assigned to LLMs During Human-AI Decision-Makingcited by 0
- 2026When AI Writes, Whose Voice Remains? Quantifying Cultural Marker Erasure Across World English Varieties in Large Language Modelscited by 0
- 2026Policy-Governed LLM Routing with Intent Matching for Instrument Laboratoriescited by 0
- 2026Modularizing Educational LLM-Agency for Fostering Responsible Learning Assistancecited by 0
- 2026AuAu: A Benchmark for Auditing Authoritarian Alignment in Large Language Modelscited by 0
- 2026Defeat Devices in AI Systemscited by 0
12 most cited of 13 All 13 (JSON)
- 2026The System Prompt Illusion: How Instruction Preambles Modify Computation in Language Models23 Sep 2026
- 2026When Persona Attributes Improve Population Alignment in Large Language Models2 Sep 2026
- 2026Defeat Devices in AI Systems27 Jun 2026
- 2026AuAu: A Benchmark for Auditing Authoritarian Alignment in Large Language Models15 Jun 2026
- 2026Scaffold, Not Vocabulary? A Controlled, Two-Tier, Pre-Registered Study of a Popperian Code-Generation Skill4 Jun 2026
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences2 Jun 2026
- 2026Modularizing Educational LLM-Agency for Fostering Responsible Learning Assistance28 May 2026
- 2026Policy-Governed LLM Routing with Intent Matching for Instrument Laboratories3 Apr 2026
- 2026When AI Writes, Whose Voice Remains? Quantifying Cultural Marker Erasure Across World English Varieties in Large Language Models25 Feb 2026
- 2026Evaluating Monolingual and Multilingual Large Language Models for Greek Question Answering: The DemosQA Benchmark18 Feb 2026
- 2026Who Does What? Archetypes of Roles Assigned to LLMs During Human-AI Decision-Making12 Feb 2026
- 2025Specification and Detection of LLM Code Smells19 Dec 2025
12 newest of 13 All 13 (JSON)