Personalizing Agent Privacy Decisions via Logical Entailment
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
Personal large language model (LLM) agents increasingly perform tasks that require access to user data, raising concerns about appropriate data disclosure. We show that relying solely on LLMs to make data-sharing decisions is insufficient. Prompting LLMs with general privacy norms fails to capture individual users' privacy preferences, while providing prior user data-sharing decisions through in-context learning (ICL) leads to unreliable and opaque reasoning. To address these limitations, we propose ARIEL (Agentic Reasoning with Individualized Entailment Logic), a framework that combines LLMs with rule-based logic to enable structured, personalized privacy reasoning. The core mechanism of ARIEL determines whether a user's prior decision on a data-sharing request textitlogically entails the same decision for a new request. Experimental evaluations using advanced models and public datasets show that ARIEL reduces the F1 error rate for appropriate judgments by 40.6% compared to standard ICL-based reasoning, indicating that ARIEL is effective at correctly judging requests where the user would approve data sharing. These results demonstrate that integrating LLMs with logical entailment provides an effective and interpretable approach for automating personalized privacy decisions.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 32 of its 103 references that are in the map. First posted on arXiv 4 Dec 2025.
Builds on
32 of 103 references.
Closest ancestors · 1
Same direction, newest first
Other references · 31
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2025Gemma 3 Technical Reportcited by 1,824
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
- 2025Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memorycited by 779
- 2023Logic-LM: Empowering Large Language Models with Symbolic Solvers for Faithful Logical Reasoningcited by 391
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2025ZebraLogic: On the Scaling Limits of LLMs for Logical Reasoningcited by 201
- 2024Don't Hallucinate, Abstain: Identifying LLM Knowledge Gaps via Multi-LLM Collaborationcited by 180
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2022The Unreliability of Explanations in Few-shot Prompting for Textual Reasoningcited by 169
19 more
- 2023LINC: A Neurosymbolic Approach for Logical Reasoning by Combining Language Models with First-Order Logic Proverscited by 168
- 2025AbstentionBench: Reasoning LLMs Fail on Unanswerable Questionscited by 145
- 2023SatLM: Satisfiability-Aided Language Models Using Declarative Promptingcited by 102
- 2025Contextual Agent Security: A Policy for Every Purposecited by 59
- 2025Fully Autonomous AI Agents Should Not be Developedcited by 45
- 2024GoldCoin: Grounding Large Language Models in Privacy Laws via Contextual Integrity Theorycited by 37
- 2024Operationalizing Contextual Integrity in Privacy-Conscious Assistantscited by 37
- 2024CI-Bench: Benchmarking Contextual Integrity of AI Assistants on Synthetic Datacited by 37
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 37
- 2025CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMscited by 26
- 2025Towards Automating Data Access Permissions in AI Agentscited by 21
- 2018Discovering Smart Home Internet of Things Privacy Norms Using Contextual Integritycited by 11
- 2017The Feasibility of Dynamically Granted Permissions: Aligning Mobile Privacy with User Preferencescited by 9
- 2025Understanding Privacy Norms Around LLM-Based Chatbots: A Contextual Integrity Perspectivecited by 7
- 2019Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPAcited by 4
- 2025Benchmarking LLM Privacy Recognition for Social Robot Decision Makingcited by 4
- 2025Towards Aligning Personalized Conversational Recommendation Agents with Users' Privacy Preferencescited by 4
- 2025Can LLMs Make (Personalized) Access Control Decisions?cited by 4
- 2025It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026An AI Agent Execution Environment to Safeguard User Datacited by 4
- 2026PrivacySIM: Evaluating LLM Simulation of User Privacy Behaviorcited by 0
- 2026MemArena: An Ego-Centric Benchmark for On-Device Agentic Personal Memory Assistants at Scalecited by 0
- 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignmentcited by 0
- 2026CIDER: A Dataset of Contextual Disclosure Boundaries for Privacy Preference Alignment10 Aug 2026
- 2026MemArena: An Ego-Centric Benchmark for On-Device Agentic Personal Memory Assistants at Scale20 May 2026
- 2026PrivacySIM: Evaluating LLM Simulation of User Privacy Behavior12 May 2026
- 2026An AI Agent Execution Environment to Safeguard User Data21 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning
- 2026Personalized Privacy Control in LLMs via Attention Head Intervention
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers
- 2026Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents
- 2024Empowering Users in Digital Privacy Management through Interactive LLM-Based Agents
- 2026PrivacyAlign: Contextual Privacy Alignment for LLM Agents
- 2025Privacy Reasoning in Ambiguous Contexts
- 2026PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training