mlsanityData to 14 Oct 2026

Beyond Data Privacy: New Privacy Risks for Large Language Models

arXiv 2509.14278 ↗First posted 16 Sep 2025cs.CR cs.AI cs.LGcited by 6

Not on the map. Why?

Abstract (arXiv)

Large Language Models (LLMs) have achieved remarkable progress in natural language understanding, reasoning, and autonomous decision-making. However, these advancements have also come with significant privacy concerns. While significant research has focused on mitigating the data privacy risks of LLMs during various stages of model training, less attention has been paid to new threats emerging from their deployment. The integration of LLMs into widely used applications and the weaponization of their autonomous abilities have created new privacy vulnerabilities. These vulnerabilities provide opportunities for both inadvertent data leakage and malicious exfiltration from LLM-powered systems. Additionally, adversaries can exploit these systems to launch sophisticated, large-scale privacy attacks, threatening not only individual privacy but also financial security and societal trust. In this paper, we systematically examine these emerging privacy risks of LLMs. We also discuss potential mitigation strategies and call for the research community to broaden its focus beyond data privacy risks, developing new defenses to address the evolving threats posed by increasingly powerful LLMs and LLM-powered systems.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 139 of its 193 references that are in the map. First posted on arXiv 16 Sep 2025.

Builds on

139 of 193 references.

References · 139

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  4. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  5. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  6. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  7. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
  8. 2016Deep Learning with Differential Privacycited by 2,728
  9. 2023A Survey of Large Language Modelscited by 2,576
  10. 2022Emergent Abilities of Large Language Modelscited by 2,512
  11. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  12. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
38 more
  1. 2020Extracting Training Data from Large Language Modelscited by 2,189
  2. 2024Qwen2 Technical Reportcited by 2,120
  3. 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,986
  4. 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
  5. 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineeringcited by 1,737
  6. 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,242
  7. 2021Ethical and social risks of harm from Language Modelscited by 966
  8. 2021Membership Inference Attacks From First Principlescited by 878
  9. 2023REPLUG: Retrieval-Augmented Black-Box Language Modelscited by 792
  10. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  11. 2023Extracting Training Data from Diffusion Modelscited by 732
  12. 2022Efficiently Scaling Transformer Inferencecited by 539
  13. 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
  14. 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
  15. 2023Scaling Data-Constrained Language Modelscited by 403
  16. 2021Differentially Private Fine-tuning of Language Modelscited by 400
  17. 2023Detecting Pretraining Data from Large Language Modelscited by 387
  18. 2023SpecInfer: Accelerating Generative Large Language Model Serving with Tree-based Speculative Inference and Verificationcited by 365
  19. 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 348
  20. 2018Blockwise Parallel Decoding for Deep Autoregressive Modelscited by 323
  21. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
  22. 2025Defeating Prompt Injections by Designcited by 297
  23. 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 285
  24. 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
  25. 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
  26. 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
  27. 2022Emergent Analogical Reasoning in Large Language Modelscited by 240
  28. 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
  29. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  30. 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
  31. 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
  32. 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
  33. 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 175
  34. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
  35. 2021Counterfactual Memorization in Neural Language Modelscited by 156
  36. 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
  37. 2024EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakagecited by 150
  38. 2023Emergent autonomous scientific research capabilities of large language modelscited by 132

50 most cited of 139 All 139 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 4.

6 papers.