mlsanityData to 7 Oct 2026

SOTOPIA-TOM: Evaluating Privacy and Information Management in Multi-Agent Interaction with Theory of Mind

arXiv 2605.02307 ↗First posted 4 May 2026cs.MAcited by 1

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

As LLM-based agents are increasingly interacting in multi-party settings, they need to properly handle information asymmetry, i.e., knowing when and to whom to disclose information is appropriate. Yet, existing benchmarks fail to measure this ability in realistic multi-party settings. Thus, we introduce SOTOPIA-TOM, a multi-dimensional benchmarking framework to evaluate LLM agents' ability to successfully navigate information asymmetric and privacy sensitive multi-party interactions. We create an interaction environment which enables both public (broadcast) and private (direct message) communication, and craft 160 human-reviewed scenarios across eight industry sectors, each involving 3 to 5 agents with partitioned private knowledge and channel-dependent sharing policies. To measure interaction abilities, we create a multi-dimensional evaluation framework to assess how well agents share useful information, seek missing details, coordinate efficiently, and protect privacy, which we also combine into a composite INFOMGMT metric. Results show that, across 6 LLM backbones and prompting strategies (vanilla, CoT-privacy, and ToM-based interventions), even the largest high-reasoning model (GPT-5) reaches only a 62% INFOMGMT score, which indicates persistent deficiencies in information seeking and privacy-aware decision-making. Additionally, ToM-based interventions more consistently improve the overall coordination-privacy balance (for example, relative to the vanilla baseline, ToM-Coach reduces critical privacy violations on GPT-4o from 9.9% to 2.2% while increasing the composite InfoMgmt score more than 2.5x from 15% to 40%). Overall, SOTOPIA-TOM exposes persistent limitations of current LLM agents in complex, information-asymmetric coordination and provides an extensible testbed for developing more privacy-aware, theory-of-mind capable multi-agent systems.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 21 of its 33 references that are in the map. First posted on arXiv 4 May 2026.

Builds on

21 of 33 references.

Closest ancestors · 2

Same direction, newest first

  1. 2026AgentSocialBench: Evaluating Privacy Risks in Human-Centered Agentic Social Networks1 Apr
  2. 2024AirGapAgent: Protecting Privacy-Conscious Conversational Agents8 May

Other references · 19

  1. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  2. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  3. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
  4. 2020MPNet: Masked and Permuted Pre-training for Language Understandingcited by 973
  5. 2024Large Language Model based Multi-Agents: A Survey of Progress and Challengescited by 752
  6. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
  7. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
  8. 2023SOTOPIA: Interactive Evaluation for Social Intelligence in Language Agentscited by 350
  9. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 218
  10. 2023FANToM: A Benchmark for Stress-testing Machine Theory of Mind in Interactionscited by 162
  11. 2023Clever Hans or Neural Theory of Mind? Stress Testing Social Reasoning in Large Language Modelscited by 161
  12. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 161
7 more
  1. 2023Think Twice: Perspective-Taking Improves Large Language Models' Theory-of-Mind Capabilitiescited by 86
  2. 2025Beyond Single-Turn: A Survey on Multi-Turn Interactions with Large Language Modelscited by 58
  3. 2025Hypothesis-Driven Theory-of-Mind Reasoning for Large Language Modelscited by 28
  4. 2025SPIN-Bench: How Well Do LLMs Plan Strategically and Reason Socially?cited by 24
  5. 2025Guess What I am Thinking: A Benchmark for Inner Thought Reasoning of Role-Playing Language Agentscited by 5
  6. 2026Social-R1: Towards Human-like Social Reasoning in LLMscited by 4
  7. 2026SNEAK: Evaluating Strategic Communication and Information Leakage in Large Language Modelscited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025MAGPIE: A dataset for Multi-AGent contextual PrIvacy Evaluation
  2. 2023"It's a Fair Game", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents
  3. 2026Got a Secret? LLM Agents Can't Keep It: Evaluating Privacy in Multi-Agent Systems
  4. 2026MuPPET: A Benchmark for Contextual Privacy of LLM Assistants in Multi-Party Conversations
  5. 2024Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
  6. 2024Empowering Users in Digital Privacy Management through Interactive LLM-Based Agents
  7. 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning
  8. 2025The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration