IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

What Deserves Encryption? A Thought Experiment for the AI Era

By Sridhar Narayanan posted 2 days ago

  

What We Encrypt Today and Why

Most of us can easily name the kinds of data that need to be encrypted. Social security numbers. Credit card information. Health records. These are the familiar examples of what we have come to think of as sensitive data. They are protected by regulation, and they are easy to identify. Most importantly, they can be flagged and isolated with confidence.

Because of that clarity, encryption strategies have been designed around them. Symmetric encryption, in particular, has become the practical default. It is fast, efficient, and scales well. Whether it is a database of customer records, a mobile backup, or the storage system behind a messaging app, symmetric encryption often does its job quietly and effectively.

It fits well with structured data that can be clearly identified and tagged as sensitive.

Why AI Conversations Are Different

Now imagine a different kind of data. Not a form you fill out. Not a number typed into a field. Just a conversation.

Maybe you ask an AI assistant to plan your day, write a thank you note, or help you work through a passing worry. These moments may feel ordinary, but over time they begin to add up.

The agent starts to remember. It notices patterns. It learns your voice, your routines, your relationships, and your preferences. This kind of data is not stored in a field called “sensitive.” It cannot be tagged by a rule or flagged by a scanner. But it still feels personal. In some cases, even more personal than a bank account number.

These are not traditional data points. They reflect how you think, how you decide, and who you are becoming over time.

AI agents are not just processing information. They are building memory. And that memory can carry more meaning than any one message ever could.

Contextual Sensitivity: A New Encryption Challenge

This shift is where a new idea begins to take shape. One that does not rely on predefined labels or checkboxes.

Contextual sensitivity is not about what a single message contains. It is about what that message becomes when seen alongside everything else an AI system remembers. A casual note, a calendar update, or a passing comment may not seem sensitive on its own. But taken together, they can reveal patterns, intentions, and deeply personal insights.

For years, encryption has been guided by certainty, we protected what we could isolate and classify. But AI conversations do not follow those rules. They unfold. They accumulate meaning. And they often reveal more than anyone intended.

As AI systems become more agentic - capable of holding memory, carrying goals, and acting on our behalf - the risk grows. One agent may only know your location. Another may know your preferences. A third may recall what you said last week. Each one is working within its own bounds. But together, they may know more than you ever meant to share.

Traditional encryption systems are not designed to protect this kind of emergent, inferred, cross-agent context. They were built for what was already known to be sensitive. Not for what becomes sensitive over time.

And that is exactly what makes contextual sensitivity so important to address.

What Needs to Change Next

If the nature of sensitive data is changing, then our approach to encryption must change too.

What matters now is not just what data is, but what it reveals when seen in context. AI systems are not just storing information - they are building a reflection of us.

That reflection deserves protection.

Not because it fits a category. But because it carries meaning.

And meaning is worth encrypting.

0 comments
2 views

Permalink