Making AI Forget You: Data Deletion in Machine Learning
Not on the map. Why?
Cited by 364 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Intense recent discussions have focused on how to provide individuals with control over when their data can and cannot be used --- the EU's Right To Be Forgotten regulation is an example of this effort. In this paper we initiate a framework studying what to do when it is no longer permissible to deploy models derivative from specific user data. In particular, we formulate the problem of efficiently deleting individual data points from trained machine learning models. For many standard ML models, the only way to completely remove an individual's data is to retrain the whole model from scratch on the remaining data, which is often not computationally practical. We investigate algorithmic principles that enable efficient data deletion in ML. For the specific setting of k-means clustering, we propose two provably efficient deletion algorithms which achieve an average of over 100X improvement in deletion efficiency across 6 datasets, while producing clusters of comparable statistical quality to a canonical k-means++ baseline.
Key facts. Cited by 447 papers in the map (data through 7 Oct 2026). First posted on arXiv 11 Jul 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 24; 2022: 52; 2023: 66; 2024: 110; 2025: 110; 2026: 85.
447 papers.
Sort:
By area:
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2022A Survey of Machine Unlearningcited by 298
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2021Machine Unlearning of Features and Labelscited by 223
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
38 more
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2021Adaptive Machine Unlearningcited by 164
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 134
- 2023Boundary Unlearningcited by 132
- 2021Graph Unlearningcited by 129
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2022Zero-Shot Machine Unlearningcited by 125
- 2022Continual Learning and Private Unlearningcited by 124
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 94
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 90
- 2024Guardrail Baselines for Unlearning in LLMscited by 90
- 2024What makes unlearning hard and what to do about itcited by 89
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Differencecited by 85
- 2022Deep Unlearning via Randomized Conditionally Independent Hessianscited by 83
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 82
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 81
- 2024Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacycited by 78
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 76
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyondcited by 76
- 2022Recommendation Unlearningcited by 71
- 2022Federated Unlearning with Knowledge Distillationcited by 70
- 2023Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifierscited by 66
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 66
- 2023GIF: A General Graph Unlearning Strategy via Influence Functioncited by 59
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 58
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progresscited by 58
50 most cited of 447 All 447 (JSON)
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models29 Sep 2026
- 2026Machine Unlearning for Gibbs Supervised Learning Algorithms24 Sep 2026
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control23 Sep 2026
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction23 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Test-Time Unlearning via Sparse Autoencoder14 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
38 more
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
- 2026Spatial Entropy based Partitioning for Spatiotemporal Graph Unlearning29 Aug 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Rethinking Demonstration Unlearning in Imitation Learning for Robotics21 Aug 2026
- 2026Cross-Domain Generalization in Machine Unlearning via Label-Conditioned Energy Magnitude Regularization18 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models14 Aug 2026
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearning6 Aug 2026
- 2026Trajectory-Guided Forget-Recover Network for Continual LLM Unlearning4 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026On Optimization Complexity of Second-Order Certified Unlearning22 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026Erased, but Not Gone: Output Forgetting Is Not True Forgetting23 Jun 2026
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearning23 Jun 2026
- 2026Ghost Vectors: Soft-Deleted Embeddings Remain Reconstructible in HNSW Vector Databases16 Jun 2026
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations15 Jun 2026
- 2026To forget is to preserve: Machine Unlearning for 3D medical image segmentation15 Jun 2026
- 2026REMEDI: A Benchmark for Retention and Unlearning Evaluation in Multi-label Clinical Disease Inference5 Jun 2026
- 2026Exact Unlearning in Reinforcement Learning2 Jun 2026
- 2026Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models25 May 2026
- 2026Calibration vs Decision Making: Revisiting the Reliability Paradox in Unlearned Language Models20 May 2026
- 2026Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial Contributions19 May 2026
- 2026Do Vision Models Truly Forget? New Findings from Representation-Level Certification of Visual Unlearning in Vertical Federated Learning19 May 2026
- 2026Robust LLM Unlearning Against Relearning Attacks: The Minor Components in Representations Matter12 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Position: The Term "Machine Unlearning" Is Overused in LLMs8 May 2026
- 2026Not Every Subject Should Stay: Machine Unlearning for Noisy Engagement Recognition6 May 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026Unlearning Offline Stochastic Multi-Armed Bandits1 May 2026
- 2026Machine Unlearning for Class Removal through SISA-based Deep Neural Network Architectures30 Apr 2026
- 2026Shape of Memory: a Geometric Analysis of Machine Unlearning in Second-Order Optimizers24 Apr 2026
- 2026Separable Expert Architecture: Toward Privacy-Preserving LLM Personalization via Composable Adapters and Deletable User Proxies23 Apr 2026
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks22 Apr 2026
50 newest of 447 All 447 (JSON)
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2022A Survey of Machine Unlearningcited by 298
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2021Machine Unlearning of Features and Labelscited by 223
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2021Adaptive Machine Unlearningcited by 164
12 most cited of 333 All 333 (JSON)
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control23 Sep 2026
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction23 Sep 2026
- 2026Test-Time Unlearning via Sparse Autoencoder14 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026When Retain Constraints Conflict: Mitigating Forget-Retain Interference in Tabular Data6 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
12 newest of 333 All 333 (JSON)
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Modelscited by 164
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Modelscited by 22
- 2025Data Unlearning in Diffusion Modelscited by 18
- 2023Training Data Protection with Compositional Diffusion Modelscited by 16
- 2025Side Effects of Erasing Concepts from Diffusion Modelscited by 12
- 2024A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Modelscited by 11
- 2024RLCP: A Reinforcement Learning-based Copyright Protection Method for Text-to-Image Diffusion Modelcited by 4
12 most cited of 23 All 23 (JSON)
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models29 Sep 2026
- 2026Co-occurring Associated REtained concepts in Diffusion Unlearning23 Jun 2026
- 2026Erased but Exploitable: Black-box Embedding-Aware Prompting Against Unlearned Text-to-Image Diffusion Models25 May 2026
- 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks22 Apr 2026
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Models28 Feb 2026
- 2026GUDA: Counterfactual Group-wise Training Data Attribution for Diffusion Models via Unlearning30 Jan 2026
- 2026Critic-Guided Reinforcement Unlearning in Text-to-Image Diffusion6 Jan 2026
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs30 Nov 2025
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approach5 Oct 2025
- 2025Side Effects of Erasing Concepts from Diffusion Models20 Aug 2025
- 2025The Linear Geometry of Interpretable Tokens: Jailbreaking Attacks and Defenses for Unlearned Diffusion Models30 Apr 2025
- 2025Data Unlearning in Diffusion Models2 Mar 2025
12 newest of 23 All 23 (JSON)
- 2025Hyperbolic Safety-Aware Vision-Language Modelscited by 17
- 2025Analyzing and Mitigating Object Hallucination: A Training Bias Perspectivecited by 12
- 2025Approximate Domain Unlearning for Vision-Language Modelscited by 6
- 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledgecited by 3
- 2026Visual-Guided Key-Token Regularization for Multimodal Large Language Model Unlearningcited by 3
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Scorecited by 0
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearningcited by 0
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score4 May 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2026Visual-Guided Key-Token Regularization for Multimodal Large Language Model Unlearning29 Jan 2026
- 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledge20 Nov 2025
- 2025Approximate Domain Unlearning for Vision-Language Models9 Oct 2025
- 2025Analyzing and Mitigating Object Hallucination: A Training Bias Perspective6 Aug 2025
- 2025Hyperbolic Safety-Aware Vision-Language Models15 Mar 2025
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb 2024
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022Recommendation Unlearningcited by 71
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 66
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 56
- 2022ASIF: Coupled Data Turns Unimodal Models to Multimodal Without Trainingcited by 45
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2023Training Data Extraction From Pre-trained Language Models: A Surveycited by 43
- 2024Advances and Open Challenges in Federated Foundation Modelscited by 33
- 2024Continual Forgetting for Pre-trained Vision Modelscited by 29
- 2021SSSE: Efficiently Erasing Samples from Trained Machine Learning Modelscited by 28
12 most cited of 73 All 73 (JSON)
- 2026Machine Unlearning for Gibbs Supervised Learning Algorithms24 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Privacy and Safety Experiences and Concerns of U.S. Women Using Generative AI for Seeking Sexual and Reproductive Health Information10 Mar 2026
- 2026A Privacy by Design Framework for Large Language Model-Based Applications for Children19 Feb 2026
- 2025Efficient Public Verification of Private ML via Regularization3 Dec 2025
- 2025Stress-Testing Causal Claims via Cardinality Repairs2 Dec 2025
- 2025Selective Forgetting in Option Calibration: An Operator-Theoretic Gauss-Newton Framework18 Nov 2025
- 2025Factor Decorrelation Enhanced Data Removal from Deep Predictive Models27 Sep 2025
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025Precise In-Parameter Concept Erasure in Large Language Models28 May 2025
- 2025ESC: Erasing Space Concept for Knowledge Deletion3 Apr 2025
12 newest of 73 All 73 (JSON)