Beyond Data Privacy: New Privacy Risks for Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have achieved remarkable progress in natural language understanding, reasoning, and autonomous decision-making. However, these advancements have also come with significant privacy concerns. While significant research has focused on mitigating the data privacy risks of LLMs during various stages of model training, less attention has been paid to new threats emerging from their deployment. The integration of LLMs into widely used applications and the weaponization of their autonomous abilities have created new privacy vulnerabilities. These vulnerabilities provide opportunities for both inadvertent data leakage and malicious exfiltration from LLM-powered systems. Additionally, adversaries can exploit these systems to launch sophisticated, large-scale privacy attacks, threatening not only individual privacy but also financial security and societal trust. In this paper, we systematically examine these emerging privacy risks of LLMs. We also discuss potential mitigation strategies and call for the research community to broaden its focus beyond data privacy risks, developing new defenses to address the evolving threats posed by increasingly powerful LLMs and LLM-powered systems.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 139 of its 193 references that are in the map. First posted on arXiv 16 Sep 2025.
Builds on
139 of 193 references.
References · 139
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,568
- 2016Deep Learning with Differential Privacycited by 2,728
- 2023A Survey of Large Language Modelscited by 2,576
- 2022Emergent Abilities of Large Language Modelscited by 2,512
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
38 more
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2024Qwen2 Technical Reportcited by 2,120
- 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,986
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
- 2024SWE-agent: Agent-Computer Interfaces Enable Automated Software Engineeringcited by 1,737
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,242
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2021Membership Inference Attacks From First Principlescited by 878
- 2023REPLUG: Retrieval-Augmented Black-Box Language Modelscited by 792
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2023Extracting Training Data from Diffusion Modelscited by 732
- 2022Efficiently Scaling Transformer Inferencecited by 539
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2023Scaling Data-Constrained Language Modelscited by 403
- 2021Differentially Private Fine-tuning of Language Modelscited by 400
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2023SpecInfer: Accelerating Generative Large Language Model Serving with Tree-based Speculative Inference and Verificationcited by 365
- 2016Semi-supervised Knowledge Transfer for Deep Learning from Private Training Datacited by 348
- 2018Blockwise Parallel Decoding for Deep Autoregressive Modelscited by 323
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 314
- 2025Defeating Prompt Injections by Designcited by 297
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 285
- 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 257
- 2022Emergent Analogical Reasoning in Large Language Modelscited by 240
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 230
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2022Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Modelscited by 220
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 175
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2021Counterfactual Memorization in Neural Language Modelscited by 156
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2024EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakagecited by 150
- 2023Emergent autonomous scientific research capabilities of large language modelscited by 132
50 most cited of 139 All 139 (JSON)
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2026Large-scale online deanonymization with LLMscited by 14
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system securitycited by 5
- 2025ContextLeak: Auditing Leakage in Private In-Context Learning Methodscited by 4
- 2026Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agentscited by 0
- 2026Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?cited by 0
- 2026Where Is the Tradeoff in Using Third-Party API Routers for Agentic Software Development?26 Jul 2026
- 2026Towards trustworthy agentic AI: a comprehensive survey of safety, robustness, privacy, and system security17 May 2026
- 2026Profiling for Pennies: Unveiling the Privacy Iceberg of LLM Agents7 May 2026
- 2026Large-scale online deanonymization with LLMs18 Feb 2026
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation18 Dec 2025
- 2025ContextLeak: Auditing Leakage in Private In-Context Learning Methods18 Dec 2025