This paper proposes EP-Mem, an Elastic Privacy Memory architecture that reframes privacy as user-owned boundary control across social roles, and constructs EP-Bench, to the authors' knowledge the first long-term multi-party benchmark with cross-session correlated events for policy-conditioned relational disclosure.
Abstract
Large language model (LLM) agents face critical privacy risks when acting as delegates in human-agent-human communication. To prevent such breaches, agents must understand users'social relationships and adhere to context-dependent social information disclosure boundaries. Current studies on agent memory privacy focus on instantaneous interactions, leaving the long-term relational disclosure problem unexplored. In this paper, we propose EP-Mem, an Elastic Privacy Memory architecture that reframes privacy as user-owned boundary control across social roles. EP-Mem introduces (1) token-level memory driven by user-configurable a privacy policy that stratifies persons and events, combining domain-level default circulation rules with fact-level whitelist/blacklist exceptions; and (2) a pluggable sidecar with a privacy engine that aligns disclosure controls with memory across summary, detail, and boundary granularities, enforced throughout generation, storage, and retrieval. We construct EP-Bench, to our knowledge the first long-term multi-party benchmark with cross-session correlated events for policy-conditioned relational disclosure. Experiments show that EP-Mem achieves 94.0% privacy classification accuracy, improves disclosure-permission judgment from 22% to 68%, and reduces privacy leakage by 75.6%, while maintaining retrieval performance and cross-benchmark generalization.
Long-term memory enables personalized conversational agents to retain user information across sessions. However, existing memory architectures primarily optimize for utility while neglecting the risks of unnecessarily storing and reusing private attributes such as personally identifiable information (PII). Addressing p...
Wen-Jie Wang, Wen-He Si, Xin-Yue Xu et al.· 1 citation
The introduction of personalized privacy, which incorporates user-specific disclosure preferences into privacy control, and a robust inference-time attention head intervention method that adjusts disclosure behavior toward policy-consistent responses are proposed.
Junseok Kim, Nakyeong Yang, Kyomin Jung· 0 citations
Personal AI agents built on large language models (LLMs) are increasingly given access to a user's private data and communications in order to provide personalized assistance. This access creates a persistent privacy risk: the agent must decide whether a given sensitive information should be disclosed to a particular p...
Generative semantic chaffing (GS-Chaff), a training-free multi-agent framework for privacy-preserving LLM inference over natural-language text queries that hides the user’s true intent among semantically plausible chaff queries, is proposed.
Quan Zhou, Zhi-Cheng Wang, Zhengjun Yue et al.· Italian National Conference...· 1 citation
A conflict-of-evidence analysis reveals that privacy protections are particularly effective in structured environments with low risks, or with consumers actively responsible for maintaining them, but fail to adequately protect privacy in high-stakes domains without human control, technical safeguards, and legal liabili...
Abdellah Ben Yahia, Iman Kadir, El Fadil El Harrak et al.· Discover Artificial Intellig...· 0 citations
Traditional large language models (LLMs) are scoped to individual user sessions, limiting their knowledge to a single conversation and preventing them from learning user preferences that evolve over time. Existing agentic memory systems address this limitation but generally operate at the individual-user level, restric...