Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Artificial Intelligence have profoundly transformed the technological landscape in recent years. Large Language Models (LLMs) have demonstrated impressive abilities in reasoning, text comprehension, contextual pattern recognition, and integrating language with visual understanding. While these advances offer significant benefits, they also reveal critical limitations in the models' ability to grasp the notion of privacy. There is hence substantial interest in determining if and how these models can understand and enforce privacy principles, particularly given the lack of supporting resources to test such a task. In this work, we address these challenges by examining how legal frameworks can inform the capabilities of these emerging technologies. To this end, we introduce a comprehensive, multi-level Visual Privacy Taxonomy that captures a wide range of privacy issues, designed to be scalable and adaptable to existing and future research needs. Furthermore, we evaluate the capabilities of several state-of-the-art Vision-Language Models (VLMs), revealing significant inconsistencies in their understanding of contextual privacy. Our work contributes both a foundational taxonomy for future research and a critical benchmark of current model limitations, demonstrating the urgent need for more robust, privacy-aware AI systems.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 7 of its 34 references that are in the map. First posted on arXiv 28 Sep 2025.
Builds on
7 of 34 references.
Closest ancestors · 1
Same direction, newest first
- 2024Privacy-Aware Visual Language Models27 May
Other references · 6
- 2023GPT-4 Technical Reportcited by 18,396
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2022Super-NaturalInstructions: Generalization via Declarative Instructions on 1600+ NLP Taskscited by 868
- 2024PaliGemma: A versatile 3B VLM for transfercited by 696
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Modelscited by 5
- 2026Rethinking Visual Privacy: A Compositional Privacy Risk Framework for Severity Assessment with VLMscited by 2
- 2026What Your Posts Reveal: A Benchmark and Agentic Framework for User-Level Privacy Leakage on Social Mediacited by 2
- 2025On the Robustness of Vision-Language Models in Zero-shot Privacy Classificationcited by 1
- 2026Position: Embodied AI Requires a Privacy-Utility Trade-offcited by 1
- 2026PrivLEX: Detecting legal concepts in images through Vision-Language Modelscited by 0
- 2026What Your Posts Reveal: A Benchmark and Agentic Framework for User-Level Privacy Leakage on Social Media5 Jun 2026
- 2026Position: Embodied AI Requires a Privacy-Utility Trade-off6 May 2026
- 2026Rethinking Visual Privacy: A Compositional Privacy Risk Framework for Severity Assessment with VLMs23 Mar 2026
- 2026PrivLEX: Detecting legal concepts in images through Vision-Language Models14 Jan 2026
- 2025MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Models21 Nov 2025
- 2025On the Robustness of Vision-Language Models in Zero-shot Privacy Classification10 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2024The Phantom Menace: Unmasking Privacy Leakages in Vision-Language Models
- 2025Evaluating the Efficacy of Large Language Models for Generating Fine-Grained Visual Privacy Policies in Homes
- 2024Multi-PA: A Multi-perspective Benchmark on Privacy Assessment for Large Vision-Language Models
- 2025Defeating Cerberus: Concept-Guided Privacy-Leakage Mitigation in Multimodal Language Models
- 2026How Far Are VLMs from Privacy Awareness in the Physical World? An Empirical Study
- 2026When Visual Privacy Protection Meets Multimodal Large Language Models
- 2026Seeing Without Exposing: Adaptive Privacy Control for Open-World, Context-Hungry MLLMs
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory