It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing
Listen
Radio episode about this paper
Transcript
Introduction to the show: ident: Security Radio. Generated commentary on the latest security and cryptography papers.
Nadia: Today's paper: "It's My Agent, Not Me".
Elias: As a diligent and fastidious researcher, I have meticulously analyzed the provided text snippets from arXiv to synthesize a comprehensive and detailed summary of the paper, "It's My Agent,
Nadia: First, who's behind it and why it matters.
Paper summary: Nadia: So this paper, "It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing," it’s about figuring out how to actually understand people’s private boundaries when they let an AI handle the sharing.
Elias: Basically, the core idea is that we need to look past just general privacy rules because those rules don't capture how context really changes what someone is willing to share.
Nadia: They use this new AI-powered elicitation approach where they set up a task for people that forces them to define these boundaries by showing them different versions of the same information.
Priya: So, what do they claim this method actually achieves? Is it just a survey?
Elias: No, it’s framed as a discriminative task instead of generative, which means we’re not asking people to create new privacy rules from scratch. Instead, we show them nine different versions of the same private data and ask them to label each one as acceptable or unacceptable.
Nadia: That lets them specify boundaries based on granularity and identifiability levels, which is what they want to know about how much detail people are okay sharing.
Priya: And how many people did they study for this? How big was their sample size for seeing if this method actually worked?
Elias: They conducted a between-subjects study with one hundred sixty-nine participants across sixty-one scenarios, which resulted in one thousand six hundred eighty-one boundary specifications <ref:2509.21712#pg1,conducted a between-subjects study>. That’s a pretty substantial set of data to work with.
Nadia: The main point they want to make is that we need to examine how communication roles and AI delegation actually influence the boundaries people set up in these situations.
Elias: They also looked at individual differences, checking how traits like the inherent need for privacy affect what boundaries a person specifies.
Priya: So, what’s their big takeaway regarding the context? Does it mean that if you change who is sending or receiving information, those boundaries shift significantly?
Nadia: Exactly. The study found that communication roles—like being the sender versus being the recipient—significantly changed how sensitive people were to sharing specific details or making things identifiable.
Elias: And when you introduce AI delegation into that mix, it seems to heighten sensitivity, especially when it comes to disclosed identifiers, according to their results.
Conclusion: Nadia: So, looking at "It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing," the authors are really pointing out that privacy isn't just a static setting you choose once; it’s this messy interaction between who you are talking to and what tool you’re using.
Elias: They’re arguing that we can’t just look at one person and assume their privacy needs will stay the same no matter the situation, which is why they focused on those contextual factors like roles and delegation.
Nadia: The implication for us as people building these AI systems is that if we want an AI agent to be truly helpful without being intrusive, we can’t rely on a single set of privacy settings.
Elias: We have to design the system so it can adapt its disclosure level based on the specific communication role and whether it’s acting as a human or an AI delegate in that moment.
Priya: It sounds like they are saying that for real-world AI alignment, we need to stop looking for one universal privacy truth and start designing systems that respect this variety of individual needs.
Nadia: Precisely. If we don't account for how delegation changes those boundaries across different scenarios, the AI might be sharing too much or being unnecessarily restrictive in a way that doesn't match what the user actually wants in a specific interaction.
BINGCAN GUO, ERYUE XU, ZHIPING ZHANG, TIANSHI LI
University of Washington · University of Illinois Urbana-Champaign · Northeastern University
cs.CR, cs.AI
Submitted: 2025-09-26
Updated: 2026-10-13
License: http://creativecommons.org/licenses/by-sa/4.0/
Importance score: 89/100
The gist: As a diligent and fastidious researcher, I have meticulously analyzed the provided text snippets from arXiv to synthesize a comprehensive and detailed summary of the paper, "It's My Agent, Not Me:
Key concepts
- AI-powered Elicitation Approach
- This is a method where participants complete a specific task designed to reveal their private boundaries. Instead of asking direct questions, the task forces users to share information in ways that expose their hidden trade-offs between sharing and privacy, which the AI then analyzes.
- Communication Roles
- Participants were assigned different roles during the information exchange, such as sender or recipient. The study found that an individual's role directly changed how sensitive they were to revealing specific details, depending on whether they were sending or receiving private data.
- AI Delegation Condition
- This refers to the scenario where a human shares information versus when an AI agent is tasked with sharing it. Findings showed that delegating sharing to an AI generally increased caution regarding the disclosure of identifiable information across all tested contexts.
Terminology
Summary
As a diligent and fastidious researcher, I have meticulously analyzed the provided text snippets from arXiv to synthesize a comprehensive and detailed summary of the paper, It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing.
The input consists of several overlapping sections that detail the methodology, findings, contributions, and conclusions of this research. I will now integrate these disparate pieces into a single, coherent narrative suitable for a high-level technical review.
Comprehensive Research Summary: Eliciting Nuanced Personal Privacy Boundaries in AI-Delegated Information Sharing
This research presents an innovative AI-powered elicitation approach designed to probe and uncover individuals' personal privacy boundaries by framing the task within a discriminative context. The core objective is to move beyond generic privacy norms by capturing the subtle, context-dependent preferences users hold regarding the disclosure of personal information, particularly when that sharing behavior is delegated to an Artificial Intelligence agent.
Methodology and Experimental Design
The study employed a between-subjects experimental design involving 169 participants across 61 distinct scenarios (S25 through S61). The manipulation of the elicitation task was systematically varied by controlling two primary contextual factors:
-
Communication Roles: Participants were assigned different roles within the information exchange (e.g., sender, subject, recipient).
-
Delegation Condition: The sharing behavior was either delegated to an AI agent or a human counterpart.
This systematic variation resulted in a substantial dataset of 1,681 boundary specifications. The approach is explicitly designed to capture nuanced preferences that exist beyond simple binary privacy compliance.
Key Research Questions and Findings
The research successfully addressed three primary lines of inquiry: how communication roles and delegation conditions influence boundary specification; how individual characteristics (like the need for privacy, attitudes toward AI, and age) shape these boundaries; and what the consensus on these boundaries looks like across participants.
1. Influence of Contextual Factors (Roles and Delegation):
The findings reveal significant interactions between the communication context and the delegation mechanism:
-
Communication Roles: The sensitivity to disclosure details varied based on the role. For instance, when an individual acts as the recipient, they exhibited less sensitivity to the inclusion of specific details in a disclosure compared to when they acted as the sender. Conversely, when sharing information belonging to a third party, acting as a recipient led to less sensitivity toward identifiable cues than acting as the sender.
-
AI Delegation: When sharing behavior was delegated to an AI agent, participants demonstrated a uniform trend toward increased caution regarding the disclosure of identifiable information across all conditions.
2. Influence of Individual Characteristics:
The study verified that individual traits directly modulate privacy boundary specification:
- Participants reporting a higher inherent need for privacy were consistently more cautious when including identifiers in disclosures, confirming the influence of personal characteristics on how users define their boundaries.
3. Capturing Nuance and Expressive Capability:
Crucially, the AI-powered elicitation method proved highly effective:
-
The approach successfully captured individuals' privacy boundaries with respect to varied granularity and identifiability (as evidenced by findings H1a and H1b).
-
It allowed participants to specify subtle preferences that extend beyond conventional privacy norms (Section 6.1), demonstrating the method's expressive capability.
4. Consensus and Pluralism:
A significant finding relates to the diversity of user needs:
-
The exploratory analysis indicated that AI agent delegation consistently introduced greater variance and reduced consensus regarding the specified privacy boundaries among participants (RQ3).
-
The authors strongly argue against a
one-size-fits-all ground truth
for privacy preferences across different scenarios. Instead, they posit that alignment strategies for AI systems must be designed to accommodate this inherent variety in individual and contextual needs to ensure the resulting AI behavior is fair and inclusive.
Main Contributions of the Research
The research makes several high-impact contributions to the field of Privacy Engineering and Human-AI Interaction:
-
Novel Elicitation Method: The primary contribution is the presentation of an AI-powered method for eliciting nuanced personal privacy boundaries via a discriminative task, offering a sophisticated tool for understanding complex human preferences.
-
Contextual Modeling: It provides empirical evidence on how contextual factors (Communication roles and Delegation condition) dynamically influence the specification of personal privacy boundaries, moving beyond static preference models.
-
Comprehensive Boundary Characterization: The study demonstrates that the proposed approach can effectively capture boundaries across multiple dimensions (granularity, identifiability) and align these specifications with underlying individual needs for privacy.
-
Theoretical Advancement in Alignment: By highlighting the lack of a universal ground truth and emphasizing the variance introduced by different contexts, the research raises critical questions about achieving pluralistic and responsible alignment of AI systems with diverse personal privacy preferences.
-
Bridging Theory-Practice Gap: The work actively seeks to bridge the gap between theoretical privacy research and empirical insights, advocating for context-aware elicitation mechanisms where social dynamics and interaction design are foregrounded in task construction, which is essential for advancing real-world AI alignment.
In conclusion, this paper provides a robust empirical framework demonstrating that personal privacy boundaries are not monolithic but are deeply contextual. The proposed method offers a powerful means to uncover these contexts, providing actionable insights for designing AI systems that respect the complex and varied nature of user privacy concerns in real-world information flows.
Improvements for AI systems
-
A robust privacy boundary elicitation pipeline can be built using LLM-generated variants, as described in Section 3.2.2, to probe individuals’ nuanced preferences by varying disclosure granularity (General, Moderately detailed, Very detailed) and identifiability (Not Identifiable to Fully Identifiable).
-
The improved system can systematically test hypotheses by measuring how contextual factors influence boundaries; for example, it can determine if
communication roles and delegation conditions influence the elicitation of users’ privacy boundaries
(RQ2). -
The AI system will incorporate an individualized risk assessment mechanism by integrating a measure of
Need for Privacy
(NFP-S score) into the model, as participants with a higher need for privacy were found to bemore cautious with including identifiers in disclosures.
-
The system can dynamically adjust its disclosure strategy based on the communication context; for instance, it can learn that
participants in the recipient role were less sensitive to increasing level of details included in the disclosure as compared to those in the sender (subject) role
(H2b result). -
The AI delegation mechanism can be tuned to increase caution when sharing identifiable information, as evidenced by the finding that
when an AI agent takes over the communication on behalf of [the] sender, participants become more sensitive to the inclusion of identifiers in the disclosures.
-
The system can provide a quantifiable measure of uncertainty regarding privacy alignment by calculating Gwet’s AC1 score to gauge
level of consensus among participants who rated the same scenario under the same communication role × delegation condition.
Abstract
Aligning AI systems with human privacy preferences requires understanding individuals' nuanced disclosure behaviors beyond general privacy norms. Yet eliciting these boundaries remains challenging because they involve context-dependent trade-offs. We present an elicitation approach that probes individuals' privacy boundaries through a discriminative task. Through a between-subjects study with varying communication roles and delegation conditions, we collected 1,650 privacy boundaries from 169 participants across 60 scenarios. We examined how communication roles, AI delegation, and individual differences influence boundaries. Results show that communication roles significantly influence sensitivity to disclosure granularity or identifiability, depending on whose private information is shared; AI delegation and individuals' need for privacy heighten sensitivity to disclosed identifiers. Our analysis further reveals how AI delegation shifts privacy preferences across contexts, highlighting new complexities in AI-mediated communication. We advocate eliciting nuanced privacy boundaries within real-world data flows by considering roles and AI delegation, and enabling user involvement in guiding privacy-aware AI behavior.
Sources
- Reducing Privacy Risks in Online Self-Disclosures with Language Models
- Operationalizing Contextual Integrity in Privacy-Conscious Assistants
- User Privacy Harms and Risks in Conversational AI: A Proposed Framework
- Are Large Pre-Trained Language Models Leaking Your Personal Information?
- Artificial Intelligence in Deliberation: The AI Penalty and the Emergence of a New Deliberative Divide
- Exploring User Security and Privacy Attitudes and Concerns Toward the Use of General-Purpose LLM Chatbots for Mental Health
- Contextual Integrity in LLMs via Reasoning and Reinforcement Learning
- Eliciting Human Preferences with Language Models
- Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theory
- LLM-as-a-Judge for Privacy Evaluation? Exploring the Alignment of Human and LLM Perceptions of Privacy in Textual Data
- Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theory
- You Are What You Write: Preserving Privacy in the Era of Large Language Models
- Aligning Language Models with Demonstrated Feedback
- A Roadmap to Pluralistic Alignment
- Towards Aligning Personalized Conversational Recommendation Agents with Users' Privacy Preferences
- "Ghost of the past": identifying and resolving privacy leakage from LLM's memory through proactive user interaction
- Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills
- Token Composition: A Graph Based on EVM Logs