mlsanityData to 13 Oct 2026

Measuring Physical-World Privacy Awareness of Large Language Models: An Evaluation Benchmark

arXiv 2510.02356 ↗First posted 27 Sep 2025cs.CR cs.AIcited by 2

Not on the map. Why?

Abstract (arXiv)

The deployment of Large Language Models (LLMs) in embodied agents creates an urgent need to measure their privacy awareness in the physical world. Existing evaluation methods, however, are confined to natural language based scenarios. To bridge this gap, we introduce EAPrivacy, a comprehensive evaluation benchmark designed to quantify the physical-world privacy awareness of LLM-powered agents. EAPrivacy utilizes procedurally generated scenarios across four tiers to test an agent's ability to handle sensitive objects, adapt to changing environments, balance task execution with privacy constraints, and resolve conflicts with social norms. Our measurements reveal a critical deficit in current models. The top-performing model, Gemini 2.5 Pro, achieved only 59% accuracy in scenarios involving changing physical environments. Furthermore, when a task was accompanied by a privacy request, models prioritized completion over the constraint in up to 86% of cases. In high-stakes situations pitting privacy against critical social norms, leading models like GPT-4o and Claude-3.5-haiku disregarded the social norm over 15% of the time. These findings, demonstrated by our benchmark, underscore a fundamental misalignment in LLMs regarding physically grounded privacy and establish the need for more robust, physically-aware alignment. Codes and datasets will be available at https://github.com/Graph-COM/EAPrivacy.

Key facts. Cited by 2 papers in the map (data through 13 Oct 2026). Builds on 49 of its 70 references that are in the map. First posted on arXiv 27 Sep 2025.

Builds on

49 of 70 references.

References · 49

  1. 2023GPT-4 Technical Reportcited by 18,278
  2. 2025Qwen3 Technical Reportcited by 8,510
  3. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,502
  4. 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,541
  5. 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,321
  6. 2020Extracting Training Data from Large Language Modelscited by 2,181
  7. 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,052
  8. 2025Gemma 3 Technical Reportcited by 1,748
  9. 2020ALFWorld: Aligning Text and Embodied Environments for Interactive Learningcited by 1,167
  10. 2022Language Models as Zero-Shot Planners: Extracting Actionable Knowledge for Embodied Agentscited by 1,032
  11. 2022ProgPrompt: Generating Situated Robot Task Plans using Large Language Modelscited by 602
  12. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 565
37 more
  1. 2021Habitat 2.0: Training Home Assistants to Rearrange their Habitatcited by 503
  2. 2023SayPlan: Grounding Large Language Models using 3D Scene Graphs for Scalable Robot Task Planningcited by 292
  3. 2023EmbodiedGPT: Vision-Language Pre-Training via Embodied Chain of Thoughtcited by 277
  4. 2024A Survey on Vision-Language-Action Models for Embodied AIcited by 277
  5. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 223
  6. 2023Habitat 3.0: A Co-Habitat for Humans, Avatars and Robotscited by 221
  7. 2021TEACh: Task-driven Embodied Agents that Chatcited by 195
  8. 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
  9. 2021iGibson 2.0: Object-Centric Simulation for Robot Learning of Everyday Household Taskscited by 192
  10. 2023Physically Grounded Vision-Language Models for Robotic Manipulationcited by 165
  11. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 165
  12. 2020iGibson 1.0: a Simulation Environment for Interactive Tasks in Large Realistic Scenescited by 154
  13. 2023Grounded Decoding: Guiding Text Generation with Grounded Models for Embodied Agentscited by 66
  14. 2024RoboEXP: Action-Conditioned Scene Graph via Interactive Exploration for Robotic Manipulationcited by 48
  15. 2023Can Language Models be Instructed to Protect Personal Information?cited by 46
  16. 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical Worldcited by 42
  17. 2025OptimalThinkingBench: Evaluating Over and Underthinking in LLMscited by 35
  18. 2025Safety Guardrails for LLM-Enabled Robotscited by 34
  19. 2025Adversarial Attacks on Robotic Vision Language Action Modelscited by 31
  20. 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
  21. 2024Learning to Refuse: Towards Mitigating Privacy Risks in LLMscited by 22
  22. 2024The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Modelscited by 20
  23. 2025Towards Embodied Agentic AI: Review and Classification of LLM- and VLM-Driven Robot Autonomy and Interactioncited by 18
  24. 2024Easier Said Than Done: Unpacking Intent-Behavior Gap in Jailbreaking LLM-Based Robotscited by 14
  25. 2023ViStruct: Visual Structural Knowledge Extraction via Curriculum Guided Code-Vision Representationcited by 13
  26. 2024Constrained Human-AI Cooperation: An Inclusive Embodied Social Intelligence Challengecited by 13
  27. 2025Position: Contextual Integrity is Inadequately Applied to Language Modelscited by 11
  28. 2025Safety of Embodied Navigation: A Surveycited by 9
  29. 2025VIPER: Visual Perception and Explainable Reasoning for Sequential Decision-Makingcited by 8
  30. 2022Exploiting Proximity-Aware Tasks for Embodied Social Navigationcited by 6
  31. 2019Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPAcited by 4
  32. 2020AMLSI: A Novel Accurate Action Model Learning Algorithmcited by 3
  33. 2024A Survey on Privacy Attacks Against Digital Twin Systems in AI-Roboticscited by 3
  34. 2024Human-Like Embodied AI Interviewer: Employing Android ERICA in Real International Conferencecited by 3
  35. 2024How Privacy-Savvy Are Large Language Models? A Case Study on Compliance and Privacy Technical Reviewcited by 2
  36. 2025RAIDER: Tool-Equipped Large Language Model Agent for Robotic Action Issue Detection, Explanation and Recoverycited by 2
  37. 2025BadNAVer: Exploring Jailbreak Attacks On Vision-and-Language Navigationcited by 1

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agents
  2. 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
  3. 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions
  4. 2025MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation
  5. 2026NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents
  6. 2025Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models
  7. 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI
  8. 2025MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation