Certified Data Removal from Machine Learning Models
Not on the map. Why?
Cited by 409 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Good data stewardship requires removal of data at the request of the data's owner. This raises the question if and how a trained machine-learning model, which implicitly stores information about its training data, should be affected by such a removal request. Is it possible to "remove" data from a machine-learning model? We study this problem by defining certified removal: a very strong theoretical guarantee that a model from which data is removed cannot be distinguished from a model that never observed the data to begin with. We develop a certified-removal mechanism for linear classifiers and empirically study learning settings in which this mechanism is practical.
Key facts. Cited by 512 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 23; 2022: 45; 2023: 64; 2024: 132; 2025: 135; 2026: 113.
512 papers.
Sort:
By area:
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2022A Survey of Machine Unlearningcited by 298
- 2023Large Language Model Unlearningcited by 288
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2021Machine Unlearning of Features and Labelscited by 223
38 more
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2021Adaptive Machine Unlearningcited by 164
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearningcited by 164
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 134
- 2023Boundary Unlearningcited by 132
- 2021Graph Unlearningcited by 129
- 2021Machine Unlearning via Algorithmic Stabilitycited by 128
- 2022Zero-Shot Machine Unlearningcited by 125
- 2022Continual Learning and Private Unlearningcited by 124
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 94
- 2022Federated Unlearning: How to Efficiently Erase a Client in FL?cited by 90
- 2024Guardrail Baselines for Unlearning in LLMscited by 90
- 2024What makes unlearning hard and what to do about itcited by 89
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2022Deep Unlearning via Randomized Conditionally Independent Hessianscited by 83
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearningcited by 82
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 76
- 2022Recommendation Unlearningcited by 71
- 2023Fast Model Debias with Machine Unlearningcited by 70
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 66
- 2023GIF: A General Graph Unlearning Strategy via Influence Functioncited by 59
- 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutionscited by 59
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learningcited by 58
- 2024Position: LLM Unlearning Benchmarks are Weak Measures of Progresscited by 58
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 56
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
50 most cited of 512 All 512 (JSON)
- 2026Repurposing Obsolete Representations for Post-Deployment Adaptation1 Oct 2026
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structure1 Oct 2026
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026UNBIND: UNlearning By INference-time Directional Steering for Code LLMs28 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Causal Routing for Unlearning28 Sep 2026
- 2026Machine Unlearning for Gibbs Supervised Learning Algorithms24 Sep 2026
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction23 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
38 more
- 2026Data Attribution via Sketched Metadifferentiation14 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models10 Sep 2026
- 2026Published Unlearning Numbers Move Per Checkpoint, and Not Because the Removed Data Survives: An Audit of 263 Released Batch-Normalized Checkpoints10 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026On the Recoverability of Private Information Unlearning in Large Language Models30 Aug 2026
- 2026On the Plasticity Collapse in Continual Machine Unlearning30 Aug 2026
- 2026Spatial Entropy based Partitioning for Spatiotemporal Graph Unlearning29 Aug 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Rethinking Demonstration Unlearning in Imitation Learning for Robotics21 Aug 2026
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026Learning to Unlearn: Machine Unlearning via Learning the Unlearning Behaviors17 Aug 2026
- 2026OBLIVION: Workflow-Level Operational Skill Unlearning for Deployed Agents8 Aug 2026
- 2026Search over the Visual World: Persistent Visual Memory, Layered Indexes, and Source-Grounded Evidence8 Aug 2026
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearning6 Aug 2026
- 2026Suppression Sticks, Locality Is Fragile: A Closed-Loop Target-and-Control Audit of Task-Vector Negation in VLA Policies5 Aug 2026
- 2026Does Forgetting Transfer Across Modalities? A Real-World Benchmark for Cross-Modal Knowledge Unlearning Evaluation4 Aug 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026DECAF: De-Clustering for Adaptive Representational Unlearning27 Jul 2026
- 2026TOUR: A Trajectory-Level Unlearning Benchmark for Offline Reinforcement Learning23 Jul 2026
- 2026On Optimization Complexity of Second-Order Certified Unlearning22 Jul 2026
- 2026Unlearning as Distribution Restoration: A Controlled Counterfactual Study, a Validated Selective Screen, and the Limits of Oracle-Free Certification21 Jul 2026
- 2026Signal-Guided Optimization for Machine Unlearning13 Jul 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Auditing of Unlearning Algorithms7 Jul 2026
- 2026Revocable Learned State via Process Sidecars29 Jun 2026
- 2026The Forgetting-Retention Dilemma: Certified Unlearning Theory in Continual Learning29 Jun 2026
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning24 Jun 2026
- 2026DFMU: Data-Frugal Machine Unlearning24 Jun 2026
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026TrustErase: Auditable Instant Machine Unlearning with Passport-Embedded Representations15 Jun 2026
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget15 Jun 2026
- 2026InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Reset14 Jun 2026
- 2026Characterizing Privacy-Audit Alignment in Behavioral Audit of Machine Unlearning12 Jun 2026
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendation5 Jun 2026
50 newest of 512 All 512 (JSON)
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearningcited by 360
- 2022A Survey of Machine Unlearningcited by 298
- 2023Large Language Model Unlearningcited by 288
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 274
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 251
- 2021Machine Unlearning of Features and Labelscited by 223
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Model Sparsity Can Simplify Machine Unlearningcited by 206
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
12 most cited of 380 All 380 (JSON)
- 2026Repurposing Obsolete Representations for Post-Deployment Adaptation1 Oct 2026
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026UNBIND: UNlearning By INference-time Directional Steering for Code LLMs28 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Causal Routing for Unlearning28 Sep 2026
- 2026Quantization-Robust Unlearning through the Lens of Retain-Forget Loss Landscapes Interaction23 Sep 2026
- 2026Data Attribution via Sketched Metadifferentiation14 Sep 2026
- 2026Correlation-Guided Fast Machine Unlearning via Hessian Analysis11 Sep 2026
- 2026Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles11 Sep 2026
12 newest of 380 All 380 (JSON)
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Score Forgetting Distillation: A Swift, Data-Free Method for Machine Unlearning in Diffusion Modelscited by 22
- 2023Training Data Protection with Compositional Diffusion Modelscited by 16
- 2024Moderator: Moderating Text-to-Image Diffusion Models through Fine-grained Context-based Policiescited by 15
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Modelscited by 15
- 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimizationcited by 15
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Modelscited by 12
- 2024A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Modelscited by 11
- 2024Memories of Forgotten Conceptscited by 9
- 2024Model Integrity when Unlearning with T2I Diffusion Modelscited by 7
12 most cited of 21 All 21 (JSON)
- 2026Certifying Concept Unlearning in Text-to-Image Diffusion Models10 Sep 2026
- 2026Roots Beneath the Cut: Uncovering the Risk of Concept Revival in Pruning-Based Unlearning for Diffusion Models28 Feb 2026
- 2026Selective Fine-Tuning for Targeted and Robust Concept Unlearning8 Feb 2026
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Masking7 Jan 2026
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models6 Jan 2026
- 2025Adaptive-lambda Subtracted Importance Sampled Scores in Machine Unlearning for DDPMs and VAEs30 Nov 2025
- 2025Fast Data Attribution for Text-to-Image Models13 Nov 2025
- 2025Unlearning in Diffusion models under Data Constraints: A Variational Inference Approach5 Oct 2025
- 2025Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation20 Aug 2025
- 2025Sculpting Memory: Multi-Concept Forgetting in Diffusion Models via Dynamic Mask and Concept-Aware Optimization12 Apr 2025
- 2024Boosting Alignment for Post-Unlearning Text-to-Image Generative Models9 Dec 2024
- 2024Memories of Forgotten Concepts1 Dec 2024
12 newest of 21 All 21 (JSON)
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?cited by 22
- 2025Approximate Domain Unlearning for Vision-Language Modelscited by 6
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
- 2026Erase Persona, Forget Lore: Benchmarking Multimodal Copyright Unlearning in Large Vision Language Modelscited by 1
- 2026Does Forgetting Transfer Across Modalities? A Real-World Benchmark for Cross-Modal Knowledge Unlearning Evaluationcited by 1
- 2026Does Forgetting Transfer Across Modalities? A Real-World Benchmark for Cross-Modal Knowledge Unlearning Evaluation4 Aug 2026
- 2026Erase Persona, Forget Lore: Benchmarking Multimodal Copyright Unlearning in Large Vision Language Models5 May 2026
- 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Models16 Mar 2026
- 2025Approximate Domain Unlearning for Vision-Language Models9 Oct 2025
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May 2024
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2022Training Data Influence Analysis and Estimation: A Surveycited by 134
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022Recommendation Unlearningcited by 71
- 2023A Comprehensive Survey of Forgetting in Deep Learning Beyond Continual Learningcited by 66
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 56
- 2022ASIF: Coupled Data Turns Unimodal Models to Multimodal Without Trainingcited by 45
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023GNNDelete: A General Strategy for Unlearning in Graph Neural Networkscited by 43
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 42
- 2022Identifying a Training-Set Attack's Target Using Renormalized Influence Estimationcited by 32
12 most cited of 92 All 92 (JSON)
- 2026When Is Deletion Ordering Tractable? From Update Dynamics to Permutation Structure1 Oct 2026
- 2026Machine Unlearning for Gibbs Supervised Learning Algorithms24 Sep 2026
- 2026Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models22 Sep 2026
- 2026Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots27 Aug 2026
- 2026Dynamic Entanglement-Weighted Pruning for Quantum Federated Unlearning in Supply-Chain Risk Prediction17 Aug 2026
- 2026Search over the Visual World: Persistent Visual Memory, Layered Indexes, and Source-Grounded Evidence8 Aug 2026
- 2026Revocable Learned State via Process Sidecars29 Jun 2026
- 2026InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Reset14 Jun 2026
- 2026A Dual Representation of Influence Functions for Linearizable Models11 May 2026
- 2026How to sketch a learning algorithm8 Apr 2026
- 2026Controllable Concept Bottleneck Models1 Jan 2026
- 2025Efficient Public Verification of Private ML via Regularization3 Dec 2025
12 newest of 92 All 92 (JSON)