LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data
Not on the map. Why?
Abstract (arXiv)
Despite advances in the field of privacy-preserving Natural Language Processing (NLP), a significant challenge remains the accurate evaluation of privacy. As a potential solution, using LLMs as a privacy evaluator presents a promising approach unicodex2013 a strategy inspired by its success in other subfields of NLP. In particular, the so-called textitLLM-as-a-Judge paradigm has achieved impressive results on a variety of natural language evaluation tasks, demonstrating high agreement rates with human annotators. Recognizing that privacy is both subjective and difficult to define, we investigate whether LLM-as-a-Judge can also be leveraged to evaluate the privacy sensitivity of textual data. Furthermore, we measure how closely LLM evaluations align with human perceptions of privacy in text. Resulting from a study involving 10 datasets, 13 LLMs, and 677 human survey participants, we confirm that privacy is indeed a difficult concept to measure empirically, exhibited by generally low inter-human agreement rates. Nevertheless, we find that LLMs can accurately model a global human privacy perspective, and through an analysis of human and LLM reasoning patterns, we discuss the merits and limitations of LLM-as-a-Judge for privacy evaluation in textual data. Our findings pave the way for exploring the feasibility of LLMs as privacy evaluators, addressing a core challenge in solving pressing privacy issues with innovative technical solutions.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 29 of its 79 references that are in the map. First posted on arXiv 16 Aug 2025.
Builds on
29 of 79 references.
References · 29
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
- 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,181
- 2024A Survey on LLM-as-a-Judgecited by 1,423
- 2024Humans or LLMs as the Judge? A Study on Judgement Biasescited by 323
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
- 2024Limitations of the LLM-as-a-Judge Approach for Evaluating LLM Outputs in Expert Knowledge Taskscited by 106
- 2024On Protecting the Data Privacy of Large Language Models (LLMs): A Surveycited by 96
- 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 95
17 more
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2023PrivLM-Bench: A Multi-level Privacy Evaluation Benchmark for Language Modelscited by 37
- 2024Human-Centered Design Recommendations for LLM-as-a-Judgecited by 37
- 2021When differential privacy meets NLP: The devil is in the detailcited by 25
- 2022How to keep text private? A systematic review of deep learning methods for privacy-preserving natural language processingcited by 16
- 2024ConSiDERS-The-Human Evaluation Framework: Rethinking Human Evaluation for Generative Large Language Modelscited by 15
- 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agentcited by 14
- 2022Differential Privacy in Natural Language Processing: The Story So Farcited by 12
- 2022Parameter-Efficient Legal Domain Adaptationcited by 12
- 2024Thinking Outside of the Differential Privacy Box: A Case Study in Text Privatization with Language Model Promptingcited by 11
- 2024Human-Centered Privacy Research in the Age of Large Language Modelscited by 9
- 2025On the Impact of Noise in Differentially Private Text Rewritingcited by 8
- 2023Hierarchical Evaluation Framework: Best Practices for Human Evaluationcited by 5
- 2024Evaluating Privacy, Security, and Trust Perceptions in Conversational AI: A Systematic Reviewcited by 3
- 2022Understanding Teenage Perceptions and Configurations of Privacy on Instagramcited by 2
- 2022A Survey of User Perspectives on Security and Privacy in a Home Networking Environmentcited by 2
- 2025Investigating User Perspectives on Differentially Private Text Privatizationcited by 1
Built on by
Citing papers per year: 2025: 3; 2026: 7.
10 papers.
- 2026LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systemscited by 6
- 2026Long Context, Less Focus: A Scaling Gap in LLMs Revealed through Privacy and Personalizationcited by 5
- 2025Can LLMs Make (Personalized) Access Control Decisions?cited by 4
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3
- 2025User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarioscited by 1
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Managementcited by 0
- 2026SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generationcited by 0
- 2026Distilling Human-Aligned Privacy Sensitivity Assessment from Large Language Modelscited by 0
- 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignmentcited by 0
- 2026BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agentscited by 0
- 2026BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agents14 Sep 2026
- 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignment10 Aug 2026
- 2026LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems21 May 2026
- 2026Distilling Human-Aligned Privacy Sensitivity Assessment from Large Language Models31 Mar 2026
- 2026SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generation18 Mar 2026
- 2026Long Context, Less Focus: A Scaling Gap in LLMs Revealed through Privacy and Personalization16 Feb 2026
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management4 Feb 2026
- 2025Can LLMs Make (Personalized) Access Control Decisions?25 Nov 2025
- 2025User Perceptions vs. Proxy LLM Judges: Privacy and Helpfulness in LLM Responses to Privacy-Sensitive Scenarios23 Oct 2025
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing26 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2025SoK: The Privacy Paradox of Large Language Models: Advancements, Privacy Risks, and Mitigation
- 2026Privacy Control in Conversational LLM Platforms: A Walkthrough Study
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Models
- 2025The Model's Language Matters: A Comparative Privacy Analysis of LLMs
- 2024Preserving Privacy in Large Language Models: A Survey on Current Threats and Solutions
- 2024Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data
- 2024Privacy-Preserving Large Language Models: Mechanisms, Applications, and Future Directions
- 2026IDP-Bench: Benchmarking ability of LLMs to protect personal information in interdependent privacy contexts