LLMs Memorise and Leak Personally Identifiable Information from Training Data

Executive Summary

Large language models can memorise and reproduce personal data including names, addresses and telephone numbers, either inadvertently or through deliberate adversarial prompting. Organisations deploying such models face regulatory exposure under data protection law and reputational risk if PII surfaces in generated outputs.