arXiv: When Agents Learn to Be You: Benchmarking Privacy Leakage, Impersonation Risk, and Defenses in Persona Skills

This paper, published on arXiv in August 2026, introduces a new benchmark for evaluating privacy leakage and impersonation risks in AI systems that use "persona skills"—features that allow AI agents to mimic specific users or roles. The research demonstrates that current AI agents can inadvertently reveal sensitive personal data or be manipulated into impersonating users, even when basic safeguards are in place. It also tests several defensive techniques, finding that existing mitigation methods are only partially effective, leaving meaningful residual risk.

The findings directly affect any organization deploying AI agents that handle personal data, particularly in financial services, healthcare, customer support, and HR, where persona-based interactions are common. Compliance teams in these sectors should treat this as a signal that their AI governance frameworks may not yet cover dynamic identity-based behaviors, which fall under GDPR, AI Act, and sector-specific data protection rules.

As a next step, compliance teams should review their AI risk inventories to identify any systems that can adopt user personas or generate personalized responses. They should then update their data protection impact assessments to include impersonation and leakage scenarios, and require vendors to demonstrate how they address these specific risks. Finally, they should monitor this research area closely, as the benchmark may become a reference point for future regulatory expectations on AI transparency and data minimization.