用人类与大模型协作分析数字货币福利计划的隐私风险。
A Human-LLM Teaming Framework for Privacy Risk Analysis: An Illustration with CBDC-Based Welfare Schemes
- 大模型处理文档生成初步数据分类,人类专家评估并反馈修正。
- 人类能识别证据与推断差异,发现信息缺口,标记模糊输出。
- 适合隐私评估、政策设计者及数字治理研究者使用。
基于中央银行数字货币(CBDC)的福利计划可能因处理大量受益人个人数据而造成隐私侵犯,引发监控、歧视和污名化等风险。此类方案涉及复杂的数字生态系统和众多利益相关方,隐私风险评估需广泛收集信息、复杂推理、场景分析、情境判断和人类决策。因此,人类与大模型协同成为理想模式,可显著提升评估效果。本文提出首个系统性隐私风险分析框架PRIAM,通过迭代协作流程实现人机互补:大模型处理大规模文件生成初始输出,人类专家解读评估后指导模型优化,并最终做出判断。以一个CBDC福利方案为例,验证了该框架在数据特征化环节的有效性——大模型生成数据类别与属性值,人类则识别证据与推断区别,发现信息缺失,标记不支持或模糊内容。本框架为隐私风险评估中的人机协作提供了基础范式。
原文摘要 · Abstract (English)
Central Bank Digital Currency (CBDC)-based welfare schemes may be potentially privacy invasive as they process significant volumes of beneficiary personal data and lead to privacy harms such as surveillance, discrimination and stigmatization. Such welfare delivery schemes involve complex digital ecosystems and large number of stakeholders. Consequently, to examine their privacy risks, privacy risk assessments require extensive information gathering and synthesis, complex reasoning, scenario explorations, contextual evaluation and human judgement. Thus, they present ideal scenarios for human-LLM teaming, where effective integration of complementary human and LLM capabilities can yield an outcome far superior to either human-only or LLM-only assessments. In this paper, we propose a first human-LLM teaming framework for the systematic privacy risk analysis methodology called PRIAM. The framework specifies an iterative collaborative process in which the LLM processes large-scale documentary evidence to produce initial outputs, which are then interpreted and evaluated by human experts who direct their further refinement by the LLM and exercise their judgement to finalize the output. We illustrate the framework on the data characterization activity of PRIAM using a CBDC-based welfare scheme use case. The illustration demonstrates that while LLMs generate the initial data categories and assign initial values to data attributes, human experts evaluate and provide feedback to refine them, distinguishing documented evidence from inferences, identifying information gaps, and flagging unsupported or ambiguous outputs. This framework serves as a foundational contribution towards human-AI teaming for privacy risk assessments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。