{"id":"https://openalex.org/W7161733765","doi":"https://doi.org/10.48550/arxiv.2605.17034","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","display_name":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","publication_year":2026,"publication_date":"2026-05-16","ids":{"openalex":"https://openalex.org/W7161733765","doi":"https://doi.org/10.48550/arxiv.2605.17034"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2605.17034","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.17034","pdf_url":"https://arxiv.org/pdf/2605.17034","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2605.17034","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114353041","display_name":"Osama Zafar","orcid":"https://orcid.org/0009-0008-9621-6899","observed_orcids":["https://orcid.org/0009-0008-9621-6899"]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zafar, Osama","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120756053","display_name":"Alexander Nemecek","orcid":"https://orcid.org/0009-0000-2179-4186","observed_orcids":["https://orcid.org/0009-0000-2179-4186"]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nemecek, Alexander","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032923425","display_name":"Yiqian Zhang","orcid":"https://orcid.org/0000-0001-6021-5802","observed_orcids":["https://orcid.org/0000-0001-6021-5802"]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhang, Yiqian","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133808307","display_name":"Wenbiao Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Li, Wenbiao","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046861008","display_name":"Debargha Ganguly","orcid":"https://orcid.org/0000-0001-5662-1592","observed_orcids":["https://orcid.org/0000-0001-5662-1592"]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ganguly, Debargha","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127843036","display_name":"Vikash Singh","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Singh, Vikash","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004523290","display_name":"Vipin Chaudhary","orcid":"https://orcid.org/0000-0001-9672-6225","observed_orcids":["https://orcid.org/0000-0001-9672-6225"]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chaudhary, Vipin","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028326739","display_name":"Erman Ayday","orcid":"https://orcid.org/0000-0003-3383-1081","observed_orcids":["https://orcid.org/0000-0003-3383-1081"]},"institutions":[{"id":"https://openalex.org/I58956616","display_name":"Case Western Reserve University","ror":"https://ror.org/051fd9666","country_code":"US","type":"education","lineage":["https://openalex.org/I58956616"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ayday, Erman","raw_affiliation_strings":["Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Computer and Data Sciences Case Western Reserve University Cleveland , USA","institution_ids":["https://openalex.org/I58956616"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I58956616"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9800000190734863,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9800000190734863,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.005400000140070915,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.003800000064074993,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/privacy-policy-enforcement","display_name":"privacy policy enforcement","score":0.921999990940094},{"id":"https://openalex.org/keywords/retrieval-augmented-generation","display_name":"retrieval-augmented generation","score":0.906000018119812},{"id":"https://openalex.org/keywords/data-leakage-detection","display_name":"data leakage detection","score":0.718999981880188},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"personally identifiable information","score":0.7059999704360962},{"id":"https://openalex.org/keywords/out-of-distribution-detection","display_name":"out-of-distribution detection","score":0.8420000076293945},{"id":"https://openalex.org/keywords/synthetic-data","display_name":"synthetic data","score":0.5049999952316284},{"id":"https://openalex.org/keywords/stress-testing","display_name":"stress testing","score":0.515999972820282}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7039999961853027},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6252999901771545},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5896999835968018},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.4537999927997589},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44679999351501465},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.4438999891281128},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4108000099658966},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.39750000834465027},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3919000029563904},{"id":"https://openalex.org/C61224824","wikidata":"https://www.wikidata.org/wiki/Q2260434","display_name":"Mixture model","level":2,"score":0.3833000063896179},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30720001459121704},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C2780023022","wikidata":"https://www.wikidata.org/wiki/Q1338171","display_name":"Compensation (psychology)","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C9357733","wikidata":"https://www.wikidata.org/wiki/Q6878417","display_name":"Missing data","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2605.17034","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.17034","pdf_url":"https://arxiv.org/pdf/2605.17034","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2605.17034","doi":"https://doi.org/10.48550/arxiv.2605.17034","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2605.17034","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2605.17034","pdf_url":"https://arxiv.org/pdf/2605.17034","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7161733765.pdf","grobid_xml":"https://content.openalex.org/works/W7161733765.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4415316983","https://openalex.org/W7202048339","https://openalex.org/W4399986892","https://openalex.org/W7144002664","https://openalex.org/W7213420957","https://openalex.org/W7166885389","https://openalex.org/W7138866100","https://openalex.org/W7168261915","https://openalex.org/W4392425374","https://openalex.org/W4417322637"],"abstract_inverted_index":{"Standard":[0],"PII":[1],"filters":[2],"often":[3],"miss":[4],"contextual":[5],"data":[6,50],"leakage":[7],"in":[8],"RAG":[9],"systems,":[10],"such":[11],"as":[12,120],"non-regulated":[13],"attribute":[14],"clusters":[15],"that":[16,59],"collectively":[17],"identify":[18],"individuals.":[19],"We":[20],"introduce":[21],"a":[22,38,88,139],"Privacy":[23],"Policy":[24],"Enforcement":[25],"(PPE)":[26],"framework":[27,115],"using":[28],"dual":[29],"one-class":[30],"density":[31],"estimators":[32],"with":[33],"fused":[34],"text":[35],"embeddings":[36],"and":[37,55,84,101,128,133],"calibrated":[39],"abstain":[40],"region":[41],"for":[42,143],"out-of-distribution":[43],"inputs.":[44],"Using":[45],"an":[46],"axis-stratified,":[47],"multi-LLM":[48],"synthetic":[49],"pipeline":[51],"across":[52],"medicine,":[53],"finance,":[54],"law,":[56],"we":[57],"found":[58],"traditional":[60],"Gaussian":[61],"Mixture":[62],"baselines":[63],"fail":[64],"on":[65,71,82],"borderline-safe":[66,85],"stress":[67],"tests":[68],"by":[69,97],"focusing":[70],"linguistic":[72],"register":[73],"rather":[74],"than":[75],"content.":[76],"Our":[77],"proposed":[78],"T3+OCSVM":[79],"detector,":[80],"trained":[81],"safe":[83],"data,":[86],"achieves":[87],"borderline":[89],"AUROC":[90],"of":[91],"0.93+":[92],"while":[93],"reducing":[94],"false":[95],"positives":[96],"44-55":[98],"percentage":[99],"points":[100],"maintaining":[102],"millisecond":[103],"latency.":[104],"Compared":[105],"to":[106],"supervised":[107],"MLP":[108],"classifiers":[109],"or":[110],"14B-parameter":[111],"LLM":[112],"judges,":[113],"our":[114],"offers":[116],"superior":[117],"operational":[118],"suitability,":[119],"the":[121,129],"former":[122],"suffers":[123],"from":[124,131],"high":[125],"abstention":[126],"rates":[127],"latter":[130],"latency":[132],"calibration":[134],"issues.":[135],"This":[136],"methodology":[137],"provides":[138],"robust":[140],"stress-testing":[141],"standard":[142],"any":[144],"synthetic-data-trained":[145],"classifier.":[146]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-05-20T00:00:00"}