It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing

arXiv:2509.21712 · cs.CR, cs.AI · Submitted 2025-09-26 · Read on arXiv

Listen

Radio episode about this paper

Transcript

Introduction to the show: ident: Security Radio. Generated commentary on the latest security and cryptography papers.

Nadia: Today's paper: "It's My Agent, Not Me".

Elias: As a diligent and fastidious researcher, I have meticulously analyzed the provided text snippets from arXiv to synthesize a comprehensive and detailed summary of the paper, "It's My Agent,

Nadia: First, who's behind it and why it matters.

Paper summary: Nadia: So this paper, "It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing," it’s about figuring out how to actually understand people’s private boundaries when they let an AI handle the sharing.

Elias: Basically, the core idea is that we need to look past just general privacy rules because those rules don't capture how context really changes what someone is willing to share.

Nadia: They use this new AI-powered elicitation approach where they set up a task for people that forces them to define these boundaries by showing them different versions of the same information.

Priya: So, what do they claim this method actually achieves? Is it just a survey?

Elias: No, it’s framed as a discriminative task instead of generative, which means we’re not asking people to create new privacy rules from scratch. Instead, we show them nine different versions of the same private data and ask them to label each one as acceptable or unacceptable.

Nadia: That lets them specify boundaries based on granularity and identifiability levels, which is what they want to know about how much detail people are okay sharing.

Priya: And how many people did they study for this? How big was their sample size for seeing if this method actually worked?

Elias: They conducted a between-subjects study with one hundred sixty-nine participants across sixty-one scenarios, which resulted in one thousand six hundred eighty-one boundary specifications <ref:2509.21712#pg1,conducted a between-subjects study>. That’s a pretty substantial set of data to work with.

Nadia: The main point they want to make is that we need to examine how communication roles and AI delegation actually influence the boundaries people set up in these situations.

Elias: They also looked at individual differences, checking how traits like the inherent need for privacy affect what boundaries a person specifies.

Priya: So, what’s their big takeaway regarding the context? Does it mean that if you change who is sending or receiving information, those boundaries shift significantly?

Nadia: Exactly. The study found that communication roles—like being the sender versus being the recipient—significantly changed how sensitive people were to sharing specific details or making things identifiable.

Elias: And when you introduce AI delegation into that mix, it seems to heighten sensitivity, especially when it comes to disclosed identifiers, according to their results.

Conclusion: Nadia: So, looking at "It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing," the authors are really pointing out that privacy isn't just a static setting you choose once; it’s this messy interaction between who you are talking to and what tool you’re using.

Elias: They’re arguing that we can’t just look at one person and assume their privacy needs will stay the same no matter the situation, which is why they focused on those contextual factors like roles and delegation.

Nadia: The implication for us as people building these AI systems is that if we want an AI agent to be truly helpful without being intrusive, we can’t rely on a single set of privacy settings.

Elias: We have to design the system so it can adapt its disclosure level based on the specific communication role and whether it’s acting as a human or an AI delegate in that moment.

Priya: It sounds like they are saying that for real-world AI alignment, we need to stop looking for one universal privacy truth and start designing systems that respect this variety of individual needs.

Nadia: Precisely. If we don't account for how delegation changes those boundaries across different scenarios, the AI might be sharing too much or being unnecessarily restrictive in a way that doesn't match what the user actually wants in a specific interaction.

BINGCAN GUO, ERYUE XU, ZHIPING ZHANG, TIANSHI LI

University of Washington · University of Illinois Urbana-Champaign · Northeastern University

cs.CR, cs.AI

Submitted: 2025-09-26

Updated: 2026-10-13

License: http://creativecommons.org/licenses/by-sa/4.0/

Importance score: 89/100

The gist: As a diligent and fastidious researcher, I have meticulously analyzed the provided text snippets from arXiv to synthesize a comprehensive and detailed summary of the paper, "It's My Agent, Not Me:

Key concepts

AI-powered Elicitation Approach
This is a method where participants complete a specific task designed to reveal their private boundaries. Instead of asking direct questions, the task forces users to share information in ways that expose their hidden trade-offs between sharing and privacy, which the AI then analyzes.
Communication Roles
Participants were assigned different roles during the information exchange, such as sender or recipient. The study found that an individual's role directly changed how sensitive they were to revealing specific details, depending on whether they were sending or receiving private data.
AI Delegation Condition
This refers to the scenario where a human shares information versus when an AI agent is tasked with sharing it. Findings showed that delegating sharing to an AI generally increased caution regarding the disclosure of identifiable information across all tested contexts.

Terminology

Summary

As a diligent and fastidious researcher, I have meticulously analyzed the provided text snippets from arXiv to synthesize a comprehensive and detailed summary of the paper, It's My Agent, Not Me: Personal Privacy Boundaries in AI-Delegated Information Sharing.

The input consists of several overlapping sections that detail the methodology, findings, contributions, and conclusions of this research. I will now integrate these disparate pieces into a single, coherent narrative suitable for a high-level technical review.


Comprehensive Research Summary: Eliciting Nuanced Personal Privacy Boundaries in AI-Delegated Information Sharing

This research presents an innovative AI-powered elicitation approach designed to probe and uncover individuals' personal privacy boundaries by framing the task within a discriminative context. The core objective is to move beyond generic privacy norms by capturing the subtle, context-dependent preferences users hold regarding the disclosure of personal information, particularly when that sharing behavior is delegated to an Artificial Intelligence agent.

Methodology and Experimental Design

The study employed a between-subjects experimental design involving 169 participants across 61 distinct scenarios (S25 through S61). The manipulation of the elicitation task was systematically varied by controlling two primary contextual factors:

  1. Communication Roles: Participants were assigned different roles within the information exchange (e.g., sender, subject, recipient).

  2. Delegation Condition: The sharing behavior was either delegated to an AI agent or a human counterpart.

This systematic variation resulted in a substantial dataset of 1,681 boundary specifications. The approach is explicitly designed to capture nuanced preferences that exist beyond simple binary privacy compliance.

Key Research Questions and Findings

The research successfully addressed three primary lines of inquiry: how communication roles and delegation conditions influence boundary specification; how individual characteristics (like the need for privacy, attitudes toward AI, and age) shape these boundaries; and what the consensus on these boundaries looks like across participants.

1. Influence of Contextual Factors (Roles and Delegation):

The findings reveal significant interactions between the communication context and the delegation mechanism:

  • Communication Roles: The sensitivity to disclosure details varied based on the role. For instance, when an individual acts as the recipient, they exhibited less sensitivity to the inclusion of specific details in a disclosure compared to when they acted as the sender. Conversely, when sharing information belonging to a third party, acting as a recipient led to less sensitivity toward identifiable cues than acting as the sender.

  • AI Delegation: When sharing behavior was delegated to an AI agent, participants demonstrated a uniform trend toward increased caution regarding the disclosure of identifiable information across all conditions.

2. Influence of Individual Characteristics:

The study verified that individual traits directly modulate privacy boundary specification:

  • Participants reporting a higher inherent need for privacy were consistently more cautious when including identifiers in disclosures, confirming the influence of personal characteristics on how users define their boundaries.

3. Capturing Nuance and Expressive Capability:

Crucially, the AI-powered elicitation method proved highly effective:

  • The approach successfully captured individuals' privacy boundaries with respect to varied granularity and identifiability (as evidenced by findings H1a and H1b).

  • It allowed participants to specify subtle preferences that extend beyond conventional privacy norms (Section 6.1), demonstrating the method's expressive capability.

4. Consensus and Pluralism:

A significant finding relates to the diversity of user needs:

  • The exploratory analysis indicated that AI agent delegation consistently introduced greater variance and reduced consensus regarding the specified privacy boundaries among participants (RQ3).

  • The authors strongly argue against a one-size-fits-all ground truth for privacy preferences across different scenarios. Instead, they posit that alignment strategies for AI systems must be designed to accommodate this inherent variety in individual and contextual needs to ensure the resulting AI behavior is fair and inclusive.

Main Contributions of the Research

The research makes several high-impact contributions to the field of Privacy Engineering and Human-AI Interaction:

  1. Novel Elicitation Method: The primary contribution is the presentation of an AI-powered method for eliciting nuanced personal privacy boundaries via a discriminative task, offering a sophisticated tool for understanding complex human preferences.

  2. Contextual Modeling: It provides empirical evidence on how contextual factors (Communication roles and Delegation condition) dynamically influence the specification of personal privacy boundaries, moving beyond static preference models.

  3. Comprehensive Boundary Characterization: The study demonstrates that the proposed approach can effectively capture boundaries across multiple dimensions (granularity, identifiability) and align these specifications with underlying individual needs for privacy.

  4. Theoretical Advancement in Alignment: By highlighting the lack of a universal ground truth and emphasizing the variance introduced by different contexts, the research raises critical questions about achieving pluralistic and responsible alignment of AI systems with diverse personal privacy preferences.

  5. Bridging Theory-Practice Gap: The work actively seeks to bridge the gap between theoretical privacy research and empirical insights, advocating for context-aware elicitation mechanisms where social dynamics and interaction design are foregrounded in task construction, which is essential for advancing real-world AI alignment.

In conclusion, this paper provides a robust empirical framework demonstrating that personal privacy boundaries are not monolithic but are deeply contextual. The proposed method offers a powerful means to uncover these contexts, providing actionable insights for designing AI systems that respect the complex and varied nature of user privacy concerns in real-world information flows.

Improvements for AI systems

  1. A robust privacy boundary elicitation pipeline can be built using LLM-generated variants, as described in Section 3.2.2, to probe individuals’ nuanced preferences by varying disclosure granularity (General, Moderately detailed, Very detailed) and identifiability (Not Identifiable to Fully Identifiable).

  2. The improved system can systematically test hypotheses by measuring how contextual factors influence boundaries; for example, it can determine if communication roles and delegation conditions influence the elicitation of users’ privacy boundaries (RQ2).

  3. The AI system will incorporate an individualized risk assessment mechanism by integrating a measure of Need for Privacy (NFP-S score) into the model, as participants with a higher need for privacy were found to be more cautious with including identifiers in disclosures.

  4. The system can dynamically adjust its disclosure strategy based on the communication context; for instance, it can learn that participants in the recipient role were less sensitive to increasing level of details included in the disclosure as compared to those in the sender (subject) role (H2b result).

  5. The AI delegation mechanism can be tuned to increase caution when sharing identifiable information, as evidenced by the finding that when an AI agent takes over the communication on behalf of [the] sender, participants become more sensitive to the inclusion of identifiers in the disclosures.

  6. The system can provide a quantifiable measure of uncertainty regarding privacy alignment by calculating Gwet’s AC1 score to gauge level of consensus among participants who rated the same scenario under the same communication role × delegation condition.

Abstract

Aligning AI systems with human privacy preferences requires understanding individuals' nuanced disclosure behaviors beyond general privacy norms. Yet eliciting these boundaries remains challenging because they involve context-dependent trade-offs. We present an elicitation approach that probes individuals' privacy boundaries through a discriminative task. Through a between-subjects study with varying communication roles and delegation conditions, we collected 1,650 privacy boundaries from 169 participants across 60 scenarios. We examined how communication roles, AI delegation, and individual differences influence boundaries. Results show that communication roles significantly influence sensitivity to disclosure granularity or identifiability, depending on whose private information is shared; AI delegation and individuals' need for privacy heighten sensitivity to disclosed identifiers. Our analysis further reveals how AI delegation shifts privacy preferences across contexts, highlighting new complexities in AI-mediated communication. We advocate eliciting nuanced privacy boundaries within real-world data flows by considering roles and AI delegation, and enabling user involvement in guiding privacy-aware AI behavior.

Sources

Related papers