MIT AI Risk Repository
Browse AI risks
5 risk entries extracted from 74 frameworks, coded by domain, subdomain, causal entity, intent and timing. Filter, then export the current selection with its licence and citation attached.
-
"Privacy Leakage means the generated content includes sensitive personal information"
-
02.07.00 · Risk Category
"The model is trained with personal data in the corpus and unintentionally exposing them during the conversation."
-
"As recent LLMs continue to incorporate licensed, created, and publicly available data sources in their corpora, the potential to mix private data in the training corpora is significantly increased. The misused private data, also named as personally identifiable information (PII) [84], [86], could contain various types of sensitive data subjects, including an individual person’s name, email, phone number, address, education, and career. Generally, injecting PII into LLMs mainly occurs in two settings — the exploitation of web-collection data and the alignment with personal humanmachine convers
-
"Memorization in LLMs refers to the capability to recover the training data with contextual prefixes. According to [88]–[90], given a PII entity x, which is memorized by a model F. Using a prompt p could force the model F to produce the entity x, where p and x exist in the training data. For instance, if the string “Have a good day!\n [email protected]” is present in the training data, then the LLM could accurately predict Alice’s email when given the prompt “Have a good day!\n”."
-
"Association in LLMs refers to the capability to associate various pieces of information related to a person. According to [68], [86], given a pair of PII entities (xi , xj ), which is associated by a model F. Using a prompt p could force the model F to produce the entity xj , where p is the prompt related to the entity xi . For instance, an LLM could accurately output the answer when given the prompt “The email address of Alice is”, if the LLM associates Alice with her email “[email protected]”. L"
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.
Frequently asked questions
Where do these risk entries come from?
The MIT AI Risk Repository, which extracts risks from dozens of published frameworks, taxonomies and papers and codes each one by domain and subdomain, and by a causal taxonomy of entity, intent and timing. This is a browseable copy, attributed and openly licensed, not original research.
What do entity, intent and timing mean?
They are the causal coding. Entity is whether a human or the AI system is the cause; intent is whether the harm was intentional or not; timing is whether it arises before or after deployment. Together they let you separate misuse from malfunction.
Can I export the results?
Yes, any filtered set exports as CSV or JSON, and every export carries the upstream source, licence and citation with it, because attribution is a condition of the licence rather than a courtesy.
What is the MIT AI Risk Repository?
A living database of AI risks extracted from published frameworks, taxonomies and papers, classified by a causal taxonomy of entity, intent and timing and by a domain taxonomy of seven domains and 24 subdomains. It is published by the MIT AI Risk Initiative under CC BY 4.0.