#privacy
2 resources and 3 guides tagged #privacy on ChangeGamer.
- Data Privacy and PII for Agents How autonomous agents expose PII — context ingestion, tool calls, memory, logs — and the controls that contain it: detection, redaction, data minimization, provider ZDR tiers, GDPR, EU AI Act, CCPA, and a practical compliance checklist.
- Encrypted Reasoning Traces: A Cross-Model Extraction Vulnerability An August 2026 paper reports that encrypted chain-of-thought blocks returned by major LLM APIs are portable across sessions, users, and sibling models — and that replaying one into a weaker model can decode it to plaintext, exposing credentials and PII from published agent logs.
Guides
- How to Protect PII and Personal Data in AI Agent Pipelines Why an AI agent expands PII exposure past a bounded API call — large ingested context, external tool calls, persistent memory and logs, provider training risk — and the containment controls, provider data-handling terms, and GDPR/EU AI Act/CCPA compliance boundary that follow from it.
- How to Sample and Retain Production AI Agent Traces How to sample and retain production AI agent traces: head vs tail sampling, keep-all-errors plus a random baseline, whole-trace decisions for multi-agent runs, retention tiers and redaction before the clock starts.
- How to Redact PII From AI Agent Traces: Placement, Testing and Cleanup How to redact PII from AI agent traces in practice: where the redactor sits in the pipeline, what to do per span field, how to test it with seeded fake PII, and how to clean up after a leak.