Skip to content

EP-Mem: Elastic Privacy Memory for Social Relationship-Aware LLM Agents

Sep 2026 · 0 citations
Computer Science

TL;DR

This paper proposes EP-Mem, an Elastic Privacy Memory architecture that reframes privacy as user-owned boundary control across social roles, and constructs EP-Bench, to the authors' knowledge the first long-term multi-party benchmark with cross-session correlated events for policy-conditioned relational disclosure.

Abstract

Large language model (LLM) agents face critical privacy risks when acting as delegates in human-agent-human communication. To prevent such breaches, agents must understand users'social relationships and adhere to context-dependent social information disclosure boundaries. Current studies on agent memory privacy focus on instantaneous interactions, leaving the long-term relational disclosure problem unexplored. In this paper, we propose EP-Mem, an Elastic Privacy Memory architecture that reframes privacy as user-owned boundary control across social roles. EP-Mem introduces (1) token-level memory driven by user-configurable a privacy policy that stratifies persons and events, combining domain-level default circulation rules with fact-level whitelist/blacklist exceptions; and (2) a pluggable sidecar with a privacy engine that aligns disclosure controls with memory across summary, detail, and boundary granularities, enforced throughout generation, storage, and retrieval. We construct EP-Bench, to our knowledge the first long-term multi-party benchmark with cross-session correlated events for policy-conditioned relational disclosure. Experiments show that EP-Mem achieves 94.0% privacy classification accuracy, improves disclosure-permission judgment from 22% to 68%, and reduces privacy leakage by 75.6%, while maintaining retrieval performance and cross-benchmark generalization.

View source

Similar papers

Preprint Aug 2026

What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents

Long-term memory enables personalized conversational agents to retain user information across sessions. However, existing memory architectures primarily optimize for utility while neglecting the risks of unnecessarily storing and reusing private attributes such as personally identifiable information (PII). Addressing p...

Wen-Jie Wang, Wen-He Si, Xin-Yue Xu et al. · 1 citation
Preprint Aug 2026

Personalized Privacy Control in LLMs via Attention Head Intervention

The introduction of personalized privacy, which incorporates user-specific disclosure preferences into privacy control, and a robust inference-time attention head intervention method that adjusts disclosure behavior toward policy-consistent responses are proposed.

Junseok Kim, Nakyeong Yang, Kyomin Jung · 0 citations
#artificial intelligence Preprint Sep 2026

Confuse the Model, Control the Flow: Understanding and Mitigating Privacy Leakage from LLM Agents with Information Flow Control

Personal AI agents built on large language models (LLMs) are increasingly given access to a user's private data and communications in order to provide personalized assistance. This access creates a persistent privacy risk: the agent must decide whether a given sensitive information should be disclosed to a particular p...

Minsun Shim, Ramisha Raida Karim, Ruthwik Jakkula et al. · 1 citation
#small language model Open access Aug 2026

GS-Chaff: Multi-Agent Prompt-Level Semantic Chaffing for Privacy-Preserving LLM Inference

Generative semantic chaffing (GS-Chaff), a training-free multi-agent framework for privacy-preserving LLM inference over natural-language text queries that hides the user’s true intent among semantically plausible chaff queries, is proposed.

Quan Zhou, Zhi-Cheng Wang, Zhengjun Yue et al. · 1 citation
#federated learning Review Open access Oct 2026

Systemic privacy risks of personal data exposure through conversational large language model agents

A conflict-of-evidence analysis reveals that privacy protections are particularly effective in structured environments with low risks, or with consumers actively responsible for maintaining them, but fail to adequately protect privacy in high-stakes domains without human control, technical safeguards, and legal liabili...

Abdellah Ben Yahia, Iman Kadir, El Fadil El Harrak et al. · 0 citations
#artificial intelligence Preprint Sep 2026

AIM: A Privacy-Aware Interoperable Memory Framework for Multi-Agent Multi-User LLM Systems

Traditional large language models (LLMs) are scoped to individual user sessions, limiting their knowledge to a single conversation and preventing them from learning user preferences that evolve over time. Existing agentic memory systems address this limitation but generally operate at the individual-user level, restric...

Zachary Johnson, Nigel Boachie Kumankumah, Somya Chatterjee et al. · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.