Measuring Physical-World Privacy Awareness of Large Language Models: An Evaluation Benchmark
Not on the map. Why?
Abstract (arXiv)
The deployment of Large Language Models (LLMs) in embodied agents creates an urgent need to measure their privacy awareness in the physical world. Existing evaluation methods, however, are confined to natural language based scenarios. To bridge this gap, we introduce EAPrivacy, a comprehensive evaluation benchmark designed to quantify the physical-world privacy awareness of LLM-powered agents. EAPrivacy utilizes procedurally generated scenarios across four tiers to test an agent's ability to handle sensitive objects, adapt to changing environments, balance task execution with privacy constraints, and resolve conflicts with social norms. Our measurements reveal a critical deficit in current models. The top-performing model, Gemini 2.5 Pro, achieved only 59% accuracy in scenarios involving changing physical environments. Furthermore, when a task was accompanied by a privacy request, models prioritized completion over the constraint in up to 86% of cases. In high-stakes situations pitting privacy against critical social norms, leading models like GPT-4o and Claude-3.5-haiku disregarded the social norm over 15% of the time. These findings, demonstrated by our benchmark, underscore a fundamental misalignment in LLMs regarding physically grounded privacy and establish the need for more robust, physically-aware alignment. Codes and datasets will be available at https://github.com/Graph-COM/EAPrivacy.
Key facts. Cited by 2 papers in the map (data through 13 Oct 2026). Builds on 49 of its 70 references that are in the map. First posted on arXiv 27 Sep 2025.
Builds on
49 of 70 references.
References · 49
- 2023GPT-4 Technical Reportcited by 18,278
- 2025Qwen3 Technical Reportcited by 8,510
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,502
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,541
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,321
- 2020Extracting Training Data from Large Language Modelscited by 2,181
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,052
- 2025Gemma 3 Technical Reportcited by 1,748
- 2020ALFWorld: Aligning Text and Embodied Environments for Interactive Learningcited by 1,167
- 2022Language Models as Zero-Shot Planners: Extracting Actionable Knowledge for Embodied Agentscited by 1,032
- 2022ProgPrompt: Generating Situated Robot Task Plans using Large Language Modelscited by 602
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 565
37 more
- 2021Habitat 2.0: Training Home Assistants to Rearrange their Habitatcited by 503
- 2023SayPlan: Grounding Large Language Models using 3D Scene Graphs for Scalable Robot Task Planningcited by 292
- 2023EmbodiedGPT: Vision-Language Pre-Training via Embodied Chain of Thoughtcited by 277
- 2024A Survey on Vision-Language-Action Models for Embodied AIcited by 277
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 223
- 2023Habitat 3.0: A Co-Habitat for Humans, Avatars and Robotscited by 221
- 2021TEACh: Task-driven Embodied Agents that Chatcited by 195
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
- 2021iGibson 2.0: Object-Centric Simulation for Robot Learning of Everyday Household Taskscited by 192
- 2023Physically Grounded Vision-Language Models for Robotic Manipulationcited by 165
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 165
- 2020iGibson 1.0: a Simulation Environment for Interactive Tasks in Large Realistic Scenescited by 154
- 2023Grounded Decoding: Guiding Text Generation with Grounded Models for Embodied Agentscited by 66
- 2024RoboEXP: Action-Conditioned Scene Graph via Interactive Exploration for Robotic Manipulationcited by 48
- 2023Can Language Models be Instructed to Protect Personal Information?cited by 46
- 2024BadRobot: Jailbreaking Embodied LLM Agents in the Physical Worldcited by 42
- 2025OptimalThinkingBench: Evaluating Over and Underthinking in LLMscited by 35
- 2025Safety Guardrails for LLM-Enabled Robotscited by 34
- 2025Adversarial Attacks on Robotic Vision Language Action Modelscited by 31
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2024Learning to Refuse: Towards Mitigating Privacy Risks in LLMscited by 22
- 2024The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Modelscited by 20
- 2025Towards Embodied Agentic AI: Review and Classification of LLM- and VLM-Driven Robot Autonomy and Interactioncited by 18
- 2024Easier Said Than Done: Unpacking Intent-Behavior Gap in Jailbreaking LLM-Based Robotscited by 14
- 2023ViStruct: Visual Structural Knowledge Extraction via Curriculum Guided Code-Vision Representationcited by 13
- 2024Constrained Human-AI Cooperation: An Inclusive Embodied Social Intelligence Challengecited by 13
- 2025Position: Contextual Integrity is Inadequately Applied to Language Modelscited by 11
- 2025Safety of Embodied Navigation: A Surveycited by 9
- 2025VIPER: Visual Perception and Explainable Reasoning for Sequential Decision-Makingcited by 8
- 2022Exploiting Proximity-Aware Tasks for Embodied Social Navigationcited by 6
- 2019Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPAcited by 4
- 2020AMLSI: A Novel Accurate Action Model Learning Algorithmcited by 3
- 2024A Survey on Privacy Attacks Against Digital Twin Systems in AI-Roboticscited by 3
- 2024Human-Like Embodied AI Interviewer: Employing Android ERICA in Real International Conferencecited by 3
- 2024How Privacy-Savvy Are Large Language Models? A Case Study on Compliance and Privacy Technical Reviewcited by 2
- 2025RAIDER: Tool-Equipped Large Language Model Agent for Robotic Action Issue Detection, Explanation and Recoverycited by 2
- 2025BadNAVer: Exploring Jailbreak Attacks On Vision-and-Language Navigationcited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026MPCI-Bench: A Benchmark for Multimodal Pairwise Contextual Integrity Evaluation of Language Model Agents
- 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
- 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directions
- 2025MAGPIE: A benchmark for Multi-AGent contextual PrIvacy Evaluation
- 2026NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents
- 2025Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models
- 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI
- 2025MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation