Adaptive PII Mitigation Framework for Large Language Models

Artificial Intelligence (AI) faces growing challenges from evolving data protection laws and enforcement practices worldwide. Regulations like GDPR and CCPA impose strict compliance requirements on Machine Learning (ML) models, especially concerning personal data use. These laws grant individuals rights such as data correction and deletion, complicating the training and deployment of Large Language Models (LLMs) that rely on extensive datasets. Public data availability does not guarantee its lawful use for ML, amplifying these challenges. This paper introduces an adaptive system for mitigating risk of Personally Identifiable Information (PII) and Sensitive Personal Information (SPI) in LLMs. It dynamically aligns with diverse regulatory frameworks and integrates seamlessly into Governance, Risk, and Compliance (GRC) systems. The system uses advanced NLP techniques, context-aware analysis, and policy-driven masking to ensure regulatory compliance. Benchmarks highlight the system's effectiveness, with an F1 score of 0.95 for Passport Numbers, outperforming tools like Microsoft Presidio (0.33) and Amazon Comprehend (0.54). In human evaluations, the system achieved an average user trust score of 4.6/5, with participants acknowledging its accuracy and transparency. Observations demonstrate stricter anonymization under GDPR compared to CCPA, which permits pseudonymization and user opt-outs. These results validate the system as a scalable and robust solution for enterprise privacy compliance.

Paper

References (11)

05Detector Analysis: Utilises rules-based regulatory policy engine supporting policies including GDPR, CCPA etc
06Scalability: It can manage hundreds of rules by categorizing them into regulatory frameworks or operational contexts, ensuring efficient execution and monitoring
07RPii detectioncognitive skill - azure cognitive search
082024. Navigating Data Protection Challenges in the Era of Artificial Intelligence: A Comprehensive ReviewRevista de Inteligencia Artificial en Medicina
09Policy Manager: Provides compliance policy templates on detection and potential violations. Violations occur when a detector observes a text/sentence that disobeys the compliance policy
102024. Enhancing HIPAA Compliance in AI-driven mHealth Devices Security and Privacy2024 IEEE 48th Annual Computers, Software, and Applications Conference (COMPSAC)
112023. Evaluating the Impact of Data Protection Regulations on AI Development and DeploymentInternational Journal of Advanced Engineering Technologies and Innovations

Similar papers

© 2026 NYSGPT2525 LLC