Definition
Privacy is appropriate information flow, not secrecy. A flow is described by subject, sender, recipient, information type, transmission principle; a violation breaks the norms of its context (a symptom told to your doctor vs. sold to an insurer).
- Knowing-acting gap: models judge norms correctly but leak when they act (ConfAIde tier 4: GPT-4 39%; PrivacyLens: GPT-4 25.7%).
- Defenses: system-side data minimization (AirGapAgent), model-side CI reasoning and CI-RL (up to 40% less leakage), firewalls that project flows onto the task.
- Bridge: prompt injection is itself a CI violation: a forged sender or a false transmission principle.
Appears in
- Lecture 9, contextual integrity
- Lecture 9, ConfAIde
- Lecture 9, PrivacyLens
- Lecture 9, injection as a CI violation