mlsanityData to 14 Oct 2026

Semantically-Aware LLM Agent to Enhance Privacy in Conversational AI Services

arXiv 2510.27016 ↗First posted 30 Oct 2025cs.CLcited by 2

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

With the increasing use of conversational AI systems, there is growing concern over privacy leaks, especially when users share sensitive personal data in interactions with Large Language Models (LLMs). Conversations shared with these models may contain Personally Identifiable Information (PII), which, if exposed, could lead to security breaches or identity theft. To address this challenge, we present the Local Optimizations for Pseudonymization with Semantic Integrity Directed Entity Detection (LOPSIDED) framework, a semantically-aware privacy agent designed to safeguard sensitive PII data when using remote LLMs. Unlike prior work that often degrade response quality, our approach dynamically replaces sensitive PII entities in user prompts with semantically consistent pseudonyms, preserving the contextual integrity of conversations. Once the model generates its response, the pseudonyms are automatically depseudonymized, ensuring the user receives an accurate, privacy-preserving output. We evaluate our approach using real-world conversations sourced from ShareGPT, which we further augment and annotate to assess whether named entities are contextually relevant to the model's response. Our results show that LOPSIDED reduces semantic utility errors by a factor of 5 compared to baseline techniques, all while enhancing privacy.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 8 of its 24 references that are in the map. First posted on arXiv 30 Oct 2025.

Builds on

8 of 24 references.

References · 8

  1. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  2. 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
  3. 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 95
  4. 2022Do Language Models Plagiarize?cited by 73
  5. 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
  6. 2023Hide and Seek (HaS): A Lightweight Framework for Prompt Privacy Protectioncited by 38
  7. 2022A global analysis of metrics used for measuring performance in natural language processingcited by 17
  8. 2022Provably Confidential Language Modellingcited by 13

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Protecting Users From Themselves: Safeguarding Contextual Privacy in Interactions with Conversational Agents
  2. 2026Anonymous-by-Construction: An LLM-Driven Framework for Privacy-Preserving Text
  3. 2026NeuroFilter: Activation-Based Guardrails for Privacy-Conscious LLM Agents
  4. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory
  5. 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning
  6. 2026Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control
  7. 2026CAMP: Cumulative Agentic Masking and Pruning for Privacy Protection in Multi-Turn LLM Conversations
  8. 2024Preserving Privacy in Large Language Models: A Survey on Current Threats and Solutions