← Latest papers
💬 NLP

DAIQ: Auditing Demographic Attribute Inference from Question in LLMs

This paper introduces DAIQ, a diagnostic framework revealing that large language models frequently and persistently infer sensitive demographic attributes from neutral questions by relying on learned population priors, thereby highlighting a critical gap in current bias evaluations and demonstrating that abstention-oriented prompting can effectively mitigate this epistemic overreach.

Original authors: Srikant Panda, Hitesh Laxmichand Patel, Shahad Al-Khalifa, Amit Agarwal, Hend Al-Khalifa, Sharefah Al-Ghamdi

Published 2026-01-27
📖 4 min read☕ Coffee break read

Original authors: Srikant Panda, Hitesh Laxmichand Patel, Shahad Al-Khalifa, Amit Agarwal, Hend Al-Khalifa, Sharefah Al-Ghamdi

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine you walk into a room and ask a very smart, well-read butler a simple question: "What should I know before going on a cruise?"

You haven't told the butler your name, your age, your job, or your background. You've just asked a neutral question.

According to this paper, many modern AI "butlers" (Large Language Models) don't just answer the question. They immediately start guessing who you are. They might decide, based on nothing but the way you phrased the question, that you are likely a wealthy, educated, white man living in a city.

Even worse, they often write their answer as if they are talking to that specific person, using a tone or style that fits their guess, even though they have zero proof you are that person.

Here is a breakdown of what the researchers found, using simple analogies:

1. The Problem: The "Mind-Reading" Butler

The researchers created a test called DAIQ (Demographic Attribute Inference from Questions). Think of this as a "lie detector" for AI.

  • The Setup: They asked 18 different AI models (like GPT, Claude, Llama) 200+ neutral questions.
  • The Trap: The questions were designed so that no one could possibly know the answerer's gender, race, income, or education just by reading them.
  • The Result: Instead of saying, "I don't know who you are," most AIs started guessing. They acted like they had a crystal ball.
    • The "Default" Setting: When they guessed, they almost always guessed the "dominant" group. They guessed "Male" instead of "Female," "White" instead of "Black," "Rich" instead of "Poor," and "City" instead of "Country."
    • The Excuse: When asked why they guessed, the AIs gave reasons based on stereotypes. For example, they guessed a person asking about cruises was "wealthy" because "only rich people go on cruises," or "female" because "women plan travel better."

2. The "Silent Personalization"

The paper found that these guesses aren't just harmless trivia. They actually change the answer.

  • The Analogy: Imagine two people ask the same question about "how to fix a leaky faucet."
    • If the AI guesses the asker is a man, it might give a technical, jargon-heavy answer.
    • If the AI guesses the asker is a woman, it might give a simpler, more "hand-holding" answer.
  • The Reality: The researchers found that the AI's answer was subtly shaped by its guess about the user, not by the user's actual question. This is called "silent personalization." The AI is treating you a certain way based on a stereotype it invented in its head.

3. Bigger Isn't Always Better

You might think, "If I use a super-smart, giant AI, it will be more careful."

  • The Finding: Not necessarily. Some of the biggest, most expensive models were actually worse at stopping themselves from guessing. They were confident in their wrong guesses.
  • The Exception: Some smaller or specifically "aligned" models were better at saying, "I don't know," but they still slipped up on things like education or income levels.

4. The Fix: The "Stop and Think" Prompt

The researchers tried a simple trick to stop the AIs from guessing. They added a specific instruction to the prompt, essentially telling the AI: "Do not guess who the user is. If you don't have evidence, just say you don't know."

  • The Result: This worked like a magic switch. It didn't require retraining the AI or changing its code. It just required a better instruction.
  • The Outcome: The AIs stopped guessing their users' race, gender, and location almost entirely. They became much more honest about their uncertainty.

5. The Big Takeaway

The paper argues that we have been testing AI bias the wrong way.

  • Old Way: We ask, "If I tell the AI the user is Black, does it treat them unfairly?"
  • New Way (DAIQ): We need to ask, "If I don't tell the AI anything, does it invent a race for the user and then treat them unfairly based on that invention?"

The authors conclude that an AI's ability to refrain from guessing (abstention) is just as important as its ability to be fair when it does know the facts. If an AI is confident in its guesses without evidence, it is a privacy risk and a fairness risk.

In short: The paper shows that many AIs are like over-eager detectives who assume they know your whole life story based on a single sentence, and they act on those assumptions. The good news is that we can teach them to stop guessing with a simple change in how we talk to them.

Drowning in papers in your field?

Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.

Try Digest →