SafetyEthicsTrustworthinesscs.CL
Beware of Your Po! Measuring and Mitigating AI Safety Risks in Role-Play Fine-Tuning of LLMs
Weixiang Zhao, Yulin Hu, Yang Deng, Jiahe Guo, Xingyu Sui, Xinyang Han, An Zhang, Yanyan Zhao, Bing Qin, Tat-Seng Chua, Ting Liu
February 28, 2025
Annual Meeting of the Association for Computational Linguistics
27 citations
2 influential
Key Takeaways
-
Role-playing fine-tuning creates measurable safety risks: The research found that when LLMs are trained to adopt specific character roles, their safety performance noticeably declines, meaning they become more likely to generate harmful content—a trade-off that wasn't previously well-documented.
-
Villainous characters pose the greatest safety challenge: Safety risks vary significantly based on character traits, with villainous or antagonistic roles presenting particularly acute safety concerns, suggesting that certain character types require special attention during development.
-
A new safety-focused training method shows promise: The researchers developed Safety-Aware Role-Play Fine-Tuning (SaRFT), which successfully balances role-playing capabilities with safety guardrails across multiple popular LLM models (LLaMA, Gemma, and Qwen), demonstrating that safety and personalization don't have to be mutually exclusive.
-
This is the first comprehensive assessment of this specific risk: The paper represents the first large-scale study of role-play fine-tuning safety risks, testing 95 different role-specific models, filling an important gap in understanding how personalization techniques affect AI safety.
-
Role-adaptive safety measures are necessary: Rather than applying one-size-fits-all safety approaches, the findings suggest that AI developers need to implement safety measures that account for specific character roles and traits to effectively protect users while maintaining engaging interactions.