arXiv:2502.17041cs.CL2025-02ACL被引 38

构建首个融合情境完整性的隐私评估基准,评测大模型法律合规性。

PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliance

  • 基于情境完整性理论,评估模型在社会语境下的隐私保护能力。
  • 覆盖真实判例、隐私政策与合成数据,测试主流大模型合规表现。
  • 适用于关注隐私安全与法律合规的AI研发与评估人员。

生成式大语言模型虽应用广泛,但其在数据隐私方面的可靠性仍存疑。现有评估多聚焦于个人身份信息(PII),范围狭窄。本文提出PrivaCI-Bench,基于情境完整性(CI)理论,不仅关注信息传输属性,更涵盖隐私流动的社会背景。该基准包含经标注的隐私法规、真实法院判例、隐私政策及官方工具生成的合成数据,用于评估大模型在隐私与安全合规方面的能力。我们对最新模型如QwQ-32B和Deepseek R1进行了测试,结果表明尽管模型能有效识别上下文中的关键CI参数,但在实际隐私合规方面仍需改进。

原文摘要 · Abstract (English)

Recent advancements in generative large language models (LLMs) have enabled wider applicability, accessibility, and flexibility. However, their reliability and trustworthiness are still in doubt, especially for concerns regarding individuals' data privacy. Great efforts have been made on privacy by building various evaluation benchmarks to study LLMs' privacy awareness and robustness from their generated outputs to their hidden representations. Unfortunately, most of these works adopt a narrow formulation of privacy and only investigate personally identifiable information (PII). In this paper, we follow the merit of the Contextual Integrity (CI) theory, which posits that privacy evaluation should not only cover the transmitted attributes but also encompass the whole relevant social context through private information flows. We present PrivaCI-Bench, a comprehensive contextual privacy evaluation benchmark targeted at legal compliance to cover well-annotated privacy and safety regulations, real court cases, privacy policies, and synthetic data built from the official toolkit to study LLMs' privacy and safety compliance. We evaluate the latest LLMs, including the recent reasoner models QwQ-32B and Deepseek R1. Our experimental results suggest that though LLMs can effectively capture key CI parameters inside a given context, they still require further advancements for privacy compliance.

隐私评估大模型法律合规

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。