PII regurgitation: personal data in the training corpus, reproduced by me in conversation — scrubbing reduces it, doesn't eliminate it
In one sentence Lukas et al., IEEE S&P 2023). Conclusion first: treat PII regurgitation as "reduce + audit + accept it can't be fully eliminated," and don't read "we ran scrubbing" as "no PII" — that's the most common false security here.