{"id":"https://openalex.org/W7161733765","doi":"https://doi.org/10.48550/arxiv.2605.17034","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","display_name":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","publication_year":2026,"publication_date":"2026-05-16","ids":{"openalex":"https://openalex.org/W7161733765","doi":"https://doi.org/10.48550/arxiv.2605.17034"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17034","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17034","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114353041","display_name":"Osama Zafar","orcid":"https://orcid.org/0009-0008-9621-6899"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zafar, Osama","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136495411","display_name":"Alexander Nemecek","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nemecek, Alexander","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032923425","display_name":"Yiqian Zhang","orcid":"https://orcid.org/0000-0001-6021-5802"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yiqian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136471942","display_name":"Wenbiao Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Wenbiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125157223","display_name":"Debargha Ganguly","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ganguly, Debargha","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136476203","display_name":"Vikash Singh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Singh, Vikash","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004523290","display_name":"Vipin Chaudhary","orcid":"https://orcid.org/0000-0001-9672-6225"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chaudhary, Vipin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5028326739","display_name":"Erman Ayday","orcid":"https://orcid.org/0000-0003-3383-1081"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ayday, Erman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.29829999804496765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.29829999804496765,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.09149999916553497,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.06759999692440033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6252999901771545},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5896999835968018},{"id":"https://openalex.org/keywords/estimator","display_name":"Estimator","score":0.4537999927997589},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.4438999891281128},{"id":"https://openalex.org/keywords/gaussian","display_name":"Gaussian","score":0.39750000834465027},{"id":"https://openalex.org/keywords/mixture-model","display_name":"Mixture model","score":0.3833000063896179},{"id":"https://openalex.org/keywords/law-enforcement","display_name":"Law enforcement","score":0.34459999203681946},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.2930000126361847}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7039999961853027},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6252999901771545},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5896999835968018},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.4537999927997589},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44679999351501465},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.4438999891281128},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4108000099658966},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.39750000834465027},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3919000029563904},{"id":"https://openalex.org/C61224824","wikidata":"https://www.wikidata.org/wiki/Q2260434","display_name":"Mixture model","level":2,"score":0.3833000063896179},{"id":"https://openalex.org/C2780262971","wikidata":"https://www.wikidata.org/wiki/Q44554","display_name":"Law enforcement","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30720001459121704},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C2780023022","wikidata":"https://www.wikidata.org/wiki/Q1338171","display_name":"Compensation (psychology)","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C9357733","wikidata":"https://www.wikidata.org/wiki/Q6878417","display_name":"Missing data","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17034","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17034","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17034","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7804906964302063,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Standard":[0],"PII":[1],"filters":[2],"often":[3],"miss":[4],"contextual":[5],"data":[6,50],"leakage":[7],"in":[8],"RAG":[9],"systems,":[10],"such":[11],"as":[12,120],"non-regulated":[13],"attribute":[14],"clusters":[15],"that":[16,59],"collectively":[17],"identify":[18],"individuals.":[19],"We":[20],"introduce":[21],"a":[22,38,88,139],"Privacy":[23],"Policy":[24],"Enforcement":[25],"(PPE)":[26],"framework":[27,115],"using":[28],"dual":[29],"one-class":[30],"density":[31],"estimators":[32],"with":[33],"fused":[34],"text":[35],"embeddings":[36],"and":[37,55,84,101,128,133],"calibrated":[39],"abstain":[40],"region":[41],"for":[42,143],"out-of-distribution":[43],"inputs.":[44],"Using":[45],"an":[46],"axis-stratified,":[47],"multi-LLM":[48],"synthetic":[49],"pipeline":[51],"across":[52],"medicine,":[53],"finance,":[54],"law,":[56],"we":[57],"found":[58],"traditional":[60],"Gaussian":[61],"Mixture":[62],"baselines":[63],"fail":[64],"on":[65,71,82],"borderline-safe":[66,85],"stress":[67],"tests":[68],"by":[69,97],"focusing":[70],"linguistic":[72],"register":[73],"rather":[74],"than":[75],"content.":[76],"Our":[77],"proposed":[78],"T3+OCSVM":[79],"detector,":[80],"trained":[81],"safe":[83],"data,":[86],"achieves":[87],"borderline":[89],"AUROC":[90],"of":[91],"0.93+":[92],"while":[93],"reducing":[94],"false":[95],"positives":[96],"44-55":[98],"percentage":[99],"points":[100],"maintaining":[102],"millisecond":[103],"latency.":[104],"Compared":[105],"to":[106],"supervised":[107],"MLP":[108],"classifiers":[109],"or":[110],"14B-parameter":[111],"LLM":[112],"judges,":[113],"our":[114],"offers":[116],"superior":[117],"operational":[118],"suitability,":[119],"the":[121,129],"former":[122],"suffers":[123],"from":[124,131],"high":[125],"abstention":[126],"rates":[127],"latter":[130],"latency":[132],"calibration":[134],"issues.":[135],"This":[136],"methodology":[137],"provides":[138],"robust":[140],"stress-testing":[141],"standard":[142],"any":[144],"synthetic-data-trained":[145],"classifier.":[146]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}