Have you forgotten? A method to assess if machine learning models have forgotten data
Not on the map. Why?
Abstract (arXiv)
In the era of deep learning, aggregation of data from several sources is a common approach to ensuring data diversity. Let us consider a scenario where several providers contribute data to a consortium for the joint development of a classification model (hereafter the target model), but, now one of the providers decides to leave. This provider requests that their data (hereafter the query dataset) be removed from the databases but also that the model `forgets' their data. In this paper, for the first time, we want to address the challenging question of whether data have been forgotten by a model. We assume knowledge of the query dataset and the distribution of a model's output. We establish statistical methods that compare the target's outputs with outputs of models trained with different datasets. We evaluate our approach on several benchmark datasets (MNIST, CIFAR-10 and SVHN) and on a cardiac pathology diagnosis task using data from the Automated Cardiac Diagnosis Challenge (ACDC). We hope to encourage studies on what information a model retains and inspire extensions in more complex settings.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). First posted on arXiv 21 Apr 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 5; 2023: 3; 2024: 3; 2025: 1; 2026: 1.
16 papers.
Sort:
By area:
- 2022A Survey of Machine Unlearningcited by 298
- 2021Learning Disentangled Representations in the Imaging Domaincited by 46
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2023Machine Unlearning: A Surveycited by 18
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completenesscited by 11
- 2023Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcarecited by 9
- 2021EMA: Auditing Data Removal from Trained Modelscited by 7
- 2024Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completenesscited by 6
- 2022Measuring Unintended Memorisation of Unique Private Features in Neural Networkscited by 5
- 2022XAudit : A Theoretical Look at Auditing with Explanationscited by 5
- 2023Attesting Distributional Properties of Training Data for Machine Learningcited by 5
4 more
- 2022Why patient data cannot be easily forgotten?cited by 3
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstructioncited by 2
- 2022Unintended memorisation of unique features in neural networkscited by 1
- 2026Robust Federated Learning via Byzantine Filtering over Encrypted Updatescited by 0
- 2026Robust Federated Learning via Byzantine Filtering over Encrypted Updates5 Feb 2026
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness6 Jun 2025
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstruction24 May 2024
- 2024Machine Unlearning: A Comprehensive Survey13 May 2024
- 2024Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completeness19 Mar 2024
- 2023Attesting Distributional Properties of Training Data for Machine Learning18 Aug 2023
- 2023Machine Unlearning: A Survey6 Jun 2023
- 2023Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare20 Feb 2023
- 2022A Survey of Machine Unlearning6 Sep 2022
- 2022Why patient data cannot be easily forgotten?29 Jun 2022
- 2022XAudit : A Theoretical Look at Auditing with Explanations9 Jun 2022
- 2022Unintended memorisation of unique features in neural networks20 May 2022
4 more
- 2022Measuring Unintended Memorisation of Unique Private Features in Neural Networks16 Feb 2022
- 2021EMA: Auditing Data Removal from Trained Models8 Sep 2021
- 2021Learning Disentangled Representations in the Imaging Domain26 Aug 2021
- 2021Survey: Leakage and Privacy at Inference Time4 Jul 2021
- 2022A Survey of Machine Unlearningcited by 298
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2023Machine Unlearning: A Surveycited by 18
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completenesscited by 11
- 2024Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completenesscited by 6
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstructioncited by 2
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness6 Jun 2025
- 2024Erase to Enhance: Data-Efficient Machine Unlearning in MRI Reconstruction24 May 2024
- 2024Machine Unlearning: A Comprehensive Survey13 May 2024
- 2024Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completeness19 Mar 2024
- 2023Machine Unlearning: A Survey6 Jun 2023
- 2022A Survey of Machine Unlearning6 Sep 2022
- 2021Learning Disentangled Representations in the Imaging Domaincited by 46
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcarecited by 9
- 2021EMA: Auditing Data Removal from Trained Modelscited by 7
- 2022Measuring Unintended Memorisation of Unique Private Features in Neural Networkscited by 5
- 2022XAudit : A Theoretical Look at Auditing with Explanationscited by 5
- 2023Attesting Distributional Properties of Training Data for Machine Learningcited by 5
- 2022Why patient data cannot be easily forgotten?cited by 3
- 2022Unintended memorisation of unique features in neural networkscited by 1
- 2026Robust Federated Learning via Byzantine Filtering over Encrypted Updatescited by 0
- 2026Robust Federated Learning via Byzantine Filtering over Encrypted Updates5 Feb 2026
- 2023Attesting Distributional Properties of Training Data for Machine Learning18 Aug 2023
- 2023Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare20 Feb 2023
- 2022Why patient data cannot be easily forgotten?29 Jun 2022
- 2022XAudit : A Theoretical Look at Auditing with Explanations9 Jun 2022
- 2022Unintended memorisation of unique features in neural networks20 May 2022
- 2022Measuring Unintended Memorisation of Unique Private Features in Neural Networks16 Feb 2022
- 2021EMA: Auditing Data Removal from Trained Models8 Sep 2021
- 2021Learning Disentangled Representations in the Imaging Domain26 Aug 2021
- 2021Survey: Leakage and Privacy at Inference Time4 Jul 2021