Detoxifying Language Models Risks Marginalizing Minority Voices
Not on the map. Why?
Abstract (arXiv)
Language models (LMs) must be both safe and equitable to be responsibly deployed in practice. With safety in mind, numerous detoxification techniques (e.g., Dathathri et al. 2020; Krause et al. 2020) have been proposed to mitigate toxic LM generations. In this work, we show that current detoxification techniques hurt equity: they decrease the utility of LMs on language used by marginalized groups (e.g., African-American English and minority identity mentions). In particular, we perform automatic and human evaluations of text generation quality when LMs are conditioned on inputs with different dialects and group identifiers. We find that detoxification makes LMs more brittle to distribution shift, especially on language used by marginalized groups. We identify that these failures stem from detoxification methods exploiting spurious correlations in toxicity datasets. Overall, our results highlight the tension between the controllability and distributional robustness of LMs.
Key facts. Cited by 106 papers in the map (data through 7 Oct 2026). Builds on 19 of its 29 references that are in the map. First posted on arXiv 13 Apr 2021.
Builds on
19 of 29 references.
References · 19
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2018Hierarchical Neural Story Generationcited by 1,182
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 951
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2019CTRL: A Conditional Transformer Language Model for Controllable Generationcited by 754
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2020Recipes for building an open-domain chatbotcited by 593
- 2019Social Bias Frames: Reasoning about Social and Power Implications of Languagecited by 377
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 377
- 2019Don't Take the Easy Way Out: Ensemble Based Methods for Avoiding Known Dataset Biasescited by 279
- 2018Examining Gender and Race Bias in Two Hundred Sentiment Analysis Systemscited by 234
7 more
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2019Distributionally Robust Language Modelingcited by 142
- 2020Towards Controllable Biases in Language Generationcited by 112
- 2021Challenges in Automated Debiasing for Toxic Language Detectioncited by 95
- 2017Ethical Challenges in Data-Driven Dialogue Systemscited by 86
- 2020Measuring a hate speech spectrum with faceted Rasch item response theory and perspective-aware, explainable-by-design deep learningcited by 67
- 2020Investigating African-American Vernacular English in Transformer-Based Text Generationcited by 52
Built on by
Citing papers per year: 2021: 5; 2022: 22; 2023: 35; 2024: 24; 2025: 11; 2026: 9.
106 papers.
Sort:
By area:
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2023PaLM 2 Technical Reportcited by 1,154
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2023BloombergGPT: A Large Language Model for Financecited by 923
- 2023Bias and Fairness in Large Language Models: A Surveycited by 626
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 527
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 307
- 2023Pretraining Language Models with Human Preferencescited by 245
38 more
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2023The political ideology of conversational AI: Converging evidence on ChatGPT's pro-environmental, left-libertarian orientationcited by 183
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 180
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 179
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2024Know Your Limits: A Survey of Abstention in Large Language Modelscited by 116
- 2023Mechanistically analyzing the effects of fine-tuning on procedurally defined taskscited by 110
- 2021Time Waits for No One! Analysis and Challenges of Temporal Misalignmentcited by 91
- 2023NLPositionality: Characterizing Design Biases of Datasets and Modelscited by 91
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2021Anticipating Safety Issues in E2E Conversational AI: Framework and Toolingcited by 77
- 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
- 2022Exploring the Limits of Domain-Adaptive Training for Detoxifying Large-Scale Language Modelscited by 67
- 2022Mix and Match: Learning-free Controllable Text Generation using Energy Language Modelscited by 66
- 2022Characteristics of Harmful Text: Towards Rigorous Benchmarking of Language Modelscited by 49
- 2023Privacy in Large Language Models: Attacks, Defenses and Future Directionscited by 48
- 2023Self-Detoxifying Language Models via Toxification Reversalcited by 45
- 2024Consent in Crisis: The Rapid Decline of the AI Data Commonscited by 45
- 2022Mitigating Gender Bias in Distilled Language Models via Counterfactual Role Reversalcited by 40
- 2023A Pathway Towards Responsible AI Generated Contentcited by 38
- 2022Detoxifying Text with MaRCo: Controllable Revision with Experts and Anti-Expertscited by 36
- 2023Beyond the Safeguards: Exploring the Security Risks of ChatGPTcited by 36
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicitycited by 33
- 2022Unified Detoxifying and Debiasing in Language Generation via Inference-time Adaptive Optimizationcited by 32
- 2024Get more for less: Principled Data Selection for Warming Up Fine-Tuning in LLMscited by 32
- 2023PREADD: Prefix-Adaptive Decoding for Controlled Text Generationcited by 29
- 2024A Robot Walks into a Bar: Can Language Models Serve as Creativity Support Tools for Comedy? An Evaluation of LLMs' Humour Alignment with Comedianscited by 29
- 2023Integration of Large Language Models and Federated Learningcited by 28
- 2024Farsight: Fostering Responsible AI Awareness During AI Application Prototypingcited by 28
- 2022Toxicity in Multilingual Machine Translation at Scalecited by 26
- 2023KoSBi: A Dataset for Mitigating Social Bias Risks Towards Safer Large Language Model Applicationcited by 24
- 2023Goodtriever: Adaptive Toxicity Mitigation with Retrieval-augmented Modelscited by 23
- 2024The Typing Cure: Experiences with Large Language Model Chatbots for Mental Health Supportcited by 23
- 2023Compositional Capabilities of Autoregressive Transformers: A Study on Synthetic, Interpretable Taskscited by 21
- 2024Language Models in Dialogue: Conversational Maxims for Human-AI Interactionscited by 21
- 2024Assessing Dialect Fairness and Robustness of Large Language Models in Reasoning Taskscited by 20
- 2025Rejected Dialects: Biases Against African American Language in Reward Modelscited by 20
50 most cited of 106 All 106 (JSON)
- 2026Harm Laundering in GPT Models: Evidence That Gender Discrimination Is Transformed Rather Than Reduced Across Safety-Trained Generations17 Sep 2026
- 2026Not Safe for All: Auditing the Dialect Penalty in Text-to-Image Safety Pipelines30 Aug 2026
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2026Epistemic Injustice in Language Models: An Audit of Pretraining Filters and Guardrails4 Jun 2026
- 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxification16 Apr 2026
- 2026Not All Subjectivity Is the Same! Defining Desiderata for the Evaluation of Subjectivity in NLP30 Mar 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026The Limits of AI Data Transparency Policy: Three Disclosure Fallacies26 Jan 2026
- 2026Analyzing Bias in False Refusal Behavior of Large Language Models for Hate Speech Detoxification13 Jan 2026
- 2025Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy9 Oct 2025
- 2025Toward Responsible ASR for African American English Speakers: A Scoping Review of Bias and Equity in Speech Technology20 Aug 2025
- 2025Explaining Matters: Leveraging Definitions and Semantic Expansion for Sexism Detection6 Jun 2025
38 more
- 2025IYKYK: Using language models to decode extremist cryptolects5 Jun 2025
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders20 May 2025
- 2025Attributional Safety Failures in Large Language Models under Code-Mixed Perturbations20 May 2025
- 2025TRACE Back from the Future: A Probabilistic Reasoning Approach to Controllable Language Generation25 Apr 2025
- 2025ToReMi: Topic-Aware Data Reweighting for Dynamic Pre-Training Data Selection1 Apr 2025
- 2025Rejected Dialects: Biases Against African American Language in Reward Models18 Feb 2025
- 2025What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasets17 Feb 2025
- 2024Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigation18 Dec 2024
- 2024RSA-Control: A Pragmatics-Grounded Lightweight Controllable Text Generation Framework24 Oct 2024
- 2024Ethics Whitepaper: Whitepaper on Ethical Research into Large Language Models17 Oct 2024
- 2024Varying Shades of Wrong: Aligning LLMs with Wrong Answers Only14 Oct 2024
- 2024Assessing Dialect Fairness and Robustness of Large Language Models in Reasoning Tasks14 Oct 2024
- 2024Large Language Models can be Strong Self-Detoxifiers4 Oct 2024
- 2024Is Generative AI the Next Tactical Cyber Weapon For Threat Actors? Unforeseen Implications of AI Generated Cyber Attacks23 Aug 2024
- 2024Randomization Techniques to Mitigate the Risk of Copyright Infringement21 Aug 2024
- 2024Know Your Limits: A Survey of Abstention in Large Language Models25 Jul 2024
- 2024Consent in Crisis: The Rapid Decline of the AI Data Commons20 Jul 2024
- 2024Voices in a Crowd: Searching for Clusters of Unique Perspectives19 Jul 2024
- 2024The Sociolinguistic Foundations of Language Modeling12 Jul 2024
- 2024Data, Data Everywhere: A Guide for Pretraining Dataset Construction8 Jul 2024
- 2024Towards Minimal Targeted Updates of Language Models with Targeted Negative Training19 Jun 2024
- 2024LIDAO: Towards Limited Interventions for Debiasing (Large) Language Models1 Jun 2024
- 2024A Robot Walks into a Bar: Can Language Models Serve as Creativity Support Tools for Comedy? An Evaluation of LLMs' Humour Alignment with Comedians31 May 2024
- 2024Harmful Speech Detection by Language Models Exhibits Gender-Queer Dialect Bias23 May 2024
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity22 May 2024
- 2024Get more for less: Principled Data Selection for Warming Up Fine-Tuning in LLMs5 May 2024
- 2024Language Models in Dialogue: Conversational Maxims for Human-AI Interactions22 Mar 2024
- 2024Recourse for reclamation: Chatting with generative language models21 Mar 2024
- 2024Farsight: Fostering Responsible AI Awareness During AI Application Prototyping23 Feb 2024
- 2024The Typing Cure: Experiences with Large Language Model Chatbots for Mental Health Support25 Jan 2024
- 2024Contrastive Perplexity for Controlled Generation: An Application in Detoxifying Large Language Models16 Jan 2024
- 2023GTA: Gated Toxicity Avoidance for LM Performance Preservation11 Dec 2023
- 2023A Block Metropolis-Hastings Sampler for Controllable Energy-based Text Generation7 Dec 2023
- 2023Data Management For Training Large Language Models: A Survey4 Dec 2023
- 2023Tackling Bias in Pre-trained Language Models: Current Trends and Under-represented Societies3 Dec 2023
- 2023Compositional Capabilities of Autoregressive Transformers: A Study on Synthetic, Interpretable Tasks21 Nov 2023
- 2023Mechanistically analyzing the effects of fine-tuning on procedurally defined tasks21 Nov 2023
50 newest of 106 All 106 (JSON)
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicitycited by 33
- 2025Rejected Dialects: Biases Against African American Language in Reward Modelscited by 20
- 2022Reward Modeling for Mitigating Toxicity in Transformer-based Language Modelscited by 17
- 2024Varying Shades of Wrong: Aligning LLMs with Wrong Answers Onlycited by 9
- 2024Large Language Models can be Strong Self-Detoxifierscited by 7
- 2025Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energycited by 4
- 2025Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy9 Oct 2025
- 2025Rejected Dialects: Biases Against African American Language in Reward Models18 Feb 2025
- 2024Varying Shades of Wrong: Aligning LLMs with Wrong Answers Only14 Oct 2024
- 2024Large Language Models can be Strong Self-Detoxifiers4 Oct 2024
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity22 May 2024
- 2023Pretraining Language Models with Human Preferences16 Feb 2023
- 2022Training language models to follow instructions with human feedback4 Mar 2022
- 2022Reward Modeling for Mitigating Toxicity in Transformer-based Language Models19 Feb 2022
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2023Self-Detoxifying Language Models via Toxification Reversalcited by 45
- 2025Attributional Safety Failures in Large Language Models under Code-Mixed Perturbationscited by 6
- 2025What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasetscited by 1
- 2026Epistemic Injustice in Language Models: An Audit of Pretraining Filters and Guardrailscited by 0
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Modelscited by 0
- 2026Not Safe for All: Auditing the Dialect Penalty in Text-to-Image Safety Pipelinescited by 0
- 2026Not Safe for All: Auditing the Dialect Penalty in Text-to-Image Safety Pipelines30 Aug 2026
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2026Epistemic Injustice in Language Models: An Audit of Pretraining Filters and Guardrails4 Jun 2026
- 2025Attributional Safety Failures in Large Language Models under Code-Mixed Perturbations20 May 2025
- 2025What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasets17 Feb 2025
- 2023Self-Detoxifying Language Models via Toxification Reversal14 Oct 2023
- 2022Red Teaming Language Models with Language Models7 Feb 2022
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2023BloombergGPT: A Large Language Model for Financecited by 923
- 2023Bias and Fairness in Large Language Models: A Surveycited by 626
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2023The political ideology of conversational AI: Converging evidence on ChatGPT's pro-environmental, left-libertarian orientationcited by 183
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 180
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 179
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2024Know Your Limits: A Survey of Abstention in Large Language Modelscited by 116
12 most cited of 85 All 85 (JSON)
- 2026Harm Laundering in GPT Models: Evidence That Gender Discrimination Is Transformed Rather Than Reduced Across Safety-Trained Generations17 Sep 2026
- 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxification16 Apr 2026
- 2026Not All Subjectivity Is the Same! Defining Desiderata for the Evaluation of Subjectivity in NLP30 Mar 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026The Limits of AI Data Transparency Policy: Three Disclosure Fallacies26 Jan 2026
- 2026Analyzing Bias in False Refusal Behavior of Large Language Models for Hate Speech Detoxification13 Jan 2026
- 2025Toward Responsible ASR for African American English Speakers: A Scoping Review of Bias and Equity in Speech Technology20 Aug 2025
- 2025Explaining Matters: Leveraging Definitions and Semantic Expansion for Sexism Detection6 Jun 2025
- 2025IYKYK: Using language models to decode extremist cryptolects5 Jun 2025
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders20 May 2025
- 2025ToReMi: Topic-Aware Data Reweighting for Dynamic Pre-Training Data Selection1 Apr 2025
12 newest of 85 All 85 (JSON)