mlsanityData to 14 Oct 2026

PII-TRACE: A Benchmark for Context-Aware PII Detection in Multi-Turn LLM Conversations

arXiv 2609.22200 ↗First posted 31 Aug 2026cs.CL cs.AIcited by 1

On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks

Abstract (arXiv)

LLM assistants and agentic systems log long multi-turn conversations. AI providers often scan these conversations for Personally Identifiable Information (PII) and mask the PII before storing or processing conversation data. Yet most PII detectors and benchmarks target self-contained records rather than cross-turn evaluation. To evaluate PII detection across turns in multi-turn conversations, we introduce PII-TRACE (Tracing Recurring PII Across Conversational Exchanges), to our knowledge the first PII benchmark to assess whether detectors identify PII in conversational contexts and cover every mention of a recurring identifier across turns. PII-TRACE contains 13,148 synthetic multi-turn dialogues in 13 languages with character-level spans and identifier clusters. Across eleven baselines, including frontier LLMs, no detector achieves full entity-level coverage without substantial false positives on PII-free conversations, and single-pass reading loses a third of the gold characters on long dialogues. To close this gap, we introduce PII-Tracer, a compact 0.6B-parameter detector trained with conversation-level supervision. PII-Tracer attains the highest entity-level coverage of any system we evaluate and also performs strongly on standard single-record benchmarks.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 17 of its 39 references that are in the map. First posted on arXiv 31 Aug 2026.

Builds on

17 of 39 references.

References · 17

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  3. 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
  4. 2020Extracting Training Data from Large Language Modelscited by 2,189
  5. 2023LongBench: A Bilingual, Multitask Benchmark for Long Context Understandingcited by 1,417
  6. 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
  7. 2018Datasheets for Datasetscited by 1,386
  8. 2024RULER: What's the Real Context Size of Your Long-Context Language Models?cited by 1,346
  9. 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 483
  10. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  11. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
  12. 2023The BigScience ROOTS Corpus: A 1.6TB Composite Multilingual Datasetcited by 148
5 more
  1. 2022The Text Anonymization Benchmark (TAB): A Dedicated Corpus and Evaluation Framework for Text Anonymizationcited by 95
  2. 2025Privacy in Action: Towards Realistic Privacy Mitigation and Evaluation for LLM-Powered Agentscited by 36
  3. 2026AgentLeak: A Benchmark for Internal-Channel Privacy Leakage in Multi-Agent LLM Systemscited by 25
  4. 2025PII-Bench: Evaluating Query-Aware Privacy Protection Systemscited by 11
  5. 2026REDACT: A Systematically Controlled Multilingual Benchmark for Personal Information Detectioncited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026CAMP: Cumulative Agentic Masking and Pruning for Privacy Protection in Multi-Turn LLM Conversations
  2. 2026Beyond Continuity: Challenges of Context Switching in Multi-Turn Dialogue with LLMs
  3. 2026Discovering Universal Activation Directions for PII Leakage in Language Models
  4. 2025Semantically-Aware LLM Agent to Enhance Privacy in Conversational AI Services
  5. 2026Do LLMs Really Memorize Personally Identifiable Information? Revisiting PII Leakage with a Cue-Controlled Memorization Framework
  6. 2026PII Shield: A Browser-Level Overlay for User-Controlled Personal Identifiable Information (PII) Management in AI Interactions ↗
  7. 2026CMT-RAG: Complementary Memory Traces for Multi-turn Multi-hop RAG
  8. 2026Speak or Stay Silent: Context-Aware Turn-Taking in Multi-Party Dialogue