Gold Doesn't Always Glitter: Spectral Removal of Linear and Nonlinear Guarded Attribute Information
Not on the map. Why?
Abstract (arXiv)
We describe a simple and effective method (Spectral Attribute removaL; SAL) to remove private or guarded information from neural representations. Our method uses matrix decomposition to project the input representations into directions with reduced covariance with the guarded information rather than maximal covariance as factorization methods normally use. We begin with linear information removal and proceed to generalize our algorithm to the case of nonlinear information removal using kernels. Our experiments demonstrate that our algorithm retains better main task performance after removing the guarded information compared to previous work. In addition, our experiments demonstrate that we need a relatively small amount of guarded attribute data to remove information about these attributes, which lowers the exposure to sensitive data and is more suitable for low-resource scenarios. Code is available at https://github.com/jasonshaoshun/SAL.
Key facts. Cited by 33 papers in the map (data through 7 Oct 2026). Builds on 21 of its 32 references that are in the map. First posted on arXiv 15 Mar 2022.
Builds on
21 of 32 references.
References · 21
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2015Domain-Adversarial Training of Neural Networkscited by 3,023
- 2016Equality of Opportunity in Supervised Learningcited by 2,000
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 442
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 346
- 2016FastText.zip: Compressing text classification modelscited by 331
- 2019Lipstick on a Pig: Debiasing Methods Cover up Systematic Gender Biases in Word Embeddings But do not Remove Themcited by 268
- 2016Demographic Dialectal Variation in Social Media: A Case Study of African-American Englishcited by 194
- 2015Censoring Representations with an Adversarycited by 191
- 2014SimLex-999: Evaluating Semantic Models with (Genuine) Similarity Estimationcited by 170
- 2018Learning Gender-Neutral Word Embeddingscited by 169
9 more
- 2018Adversarial Removal of Demographic Attributes from Text Datacited by 166
- 2019Black is to Criminal as Caucasian is to Police: Detecting and Removing Multiclass Bias in Word Embeddingscited by 146
- 2017Using millions of emoji occurrences to learn any-domain representations for detecting sentiment, emotion and sarcasmcited by 117
- 2022Linear Adversarial Concept Erasurecited by 98
- 2018Towards Robust and Privacy-preserving Text Representationscited by 75
- 2019Understanding Undesirable Word Embedding Associationscited by 59
- 2018Privacy-preserving Neural Representations of Textcited by 54
- 2021Diverse Adversaries for Mitigating Bias in Trainingcited by 48
- 2018Native Language Cognate Effects on Second Language Lexical Choicecited by 11
Built on by
Citing papers per year: 2022: 2; 2023: 9; 2024: 9; 2025: 8; 2026: 5.
33 papers.
Sort:
By area:
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 149
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 66
- 2024Spectral Editing of Activations for Large Language Model Alignmentcited by 54
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projectioncited by 25
- 2023Efficient fair PCA for fair representation learningcited by 23
- 2022Better Hit the Nail on the Head than Beat around the Bush: Removing Protected Attributes with a Single Projectioncited by 17
- 2023Uncovering Intermediate Variables in Transformers using Circuit Probingcited by 12
- 2024Understanding Reasoning in Chain-of-Thought from the Hopfieldian Viewcited by 10
- 2024How Reliable are Causal Probing Interventions?cited by 9
21 more
- 2023Erasure of Unaligned Attributes from Neural Representationscited by 6
- 2025FairImagen: Post-Processing for Bias Mitigation in Text-to-Image Modelscited by 6
- 2023A Joint Matrix Factorization Analysis of Multilingual Representationscited by 5
- 2025Fundamental Limits of Perfect Concept Erasurecited by 5
- 2025From Emergence to Control: Probing and Modulating Self-Reflection in Language Modelscited by 5
- 2023Competence-Based Analysis of Language Modelscited by 4
- 2024Explaining Text Classifiers with Counterfactual Representationscited by 3
- 2025Preserving Task-Relevant Information Under Linear Concept Removalcited by 3
- 2024Surgical Feature-Space Decomposition of LLMs: Why, When and How?cited by 2
- 2024Applying Intrinsic Debiasing on Downstream Tasks: Challenges and Considerations for Machine Translationcited by 2
- 2022Log-linear Guardedness and its Implicationscited by 1
- 2023Cross-Attention is Not Enough: Incongruity-Aware Dynamic Hierarchical Fusion for Multimodal Affect Recognitioncited by 1
- 2025FALCON: Fine-grained Activation Manipulation by Contrastive Orthogonal Unalignment for Large Language Modelcited by 1
- 2025Iterative Multilingual Spectral Attribute Erasurecited by 1
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasurecited by 1
- 2024Advancing Fairness in Natural Language Processing: From Traditional Methods to Explainabilitycited by 0
- 2025Incorporating Fairness Constraints into Archetypal Analysiscited by 0
- 2026From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removalcited by 0
- 2026A framework for analyzing concept representations in neural modelscited by 0
- 2026Debiasing Without Protected Attributes: Latent Concept Erasure from Textual Profilescited by 0
- 2026Iterative Erasure Count Is Not an Affine-Invariant Concept Dimensioncited by 0
- 2026Iterative Erasure Count Is Not an Affine-Invariant Concept Dimension11 Aug 2026
- 2026Debiasing Without Protected Attributes: Latent Concept Erasure from Textual Profiles10 Jun 2026
- 2026A framework for analyzing concept representations in neural models2 May 2026
- 2026From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal7 Apr 2026
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasure8 Mar 2026
- 2025FairImagen: Post-Processing for Bias Mitigation in Text-to-Image Models24 Oct 2025
- 2025Incorporating Fairness Constraints into Archetypal Analysis16 Jul 2025
- 2025From Emergence to Control: Probing and Modulating Self-Reflection in Language Models13 Jun 2025
- 2025Convergent Linear Representations of Emergent Misalignment13 Jun 2025
- 2025Iterative Multilingual Spectral Attribute Erasure12 Jun 2025
- 2025Preserving Task-Relevant Information Under Linear Concept Removal12 Jun 2025
- 2025Fundamental Limits of Perfect Concept Erasure25 Mar 2025
21 more
- 2025FALCON: Fine-grained Activation Manipulation by Contrastive Orthogonal Unalignment for Large Language Model3 Feb 2025
- 2024Advancing Fairness in Natural Language Processing: From Traditional Methods to Explainability16 Oct 2024
- 2024Improving Instruction-Following in Language Models through Activation Steering15 Oct 2024
- 2024Understanding Reasoning in Chain-of-Thought from the Hopfieldian View4 Oct 2024
- 2024How Reliable are Causal Probing Interventions?28 Aug 2024
- 2024Refusal in Language Models Is Mediated by a Single Direction17 Jun 2024
- 2024Applying Intrinsic Debiasing on Downstream Tasks: Challenges and Considerations for Machine Translation2 Jun 2024
- 2024Surgical Feature-Space Decomposition of LLMs: Why, When and How?17 May 2024
- 2024Spectral Editing of Activations for Large Language Model Alignment15 May 2024
- 2024Explaining Text Classifiers with Counterfactual Representations1 Feb 2024
- 2023Uncovering Intermediate Variables in Transformers using Circuit Probing7 Nov 2023
- 2023A Joint Matrix Factorization Analysis of Multilingual Representations24 Oct 2023
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks29 Sep 2023
- 2023LEACE: Perfect linear concept erasure in closed form6 Jun 2023
- 2023Cross-Attention is Not Enough: Incongruity-Aware Dynamic Hierarchical Fusion for Multimodal Affect Recognition23 May 2023
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projection17 May 2023
- 2023Competence-Based Analysis of Language Models1 Mar 2023
- 2023Efficient fair PCA for fair representation learning26 Feb 2023
- 2023Erasure of Unaligned Attributes from Neural Representations6 Feb 2023
- 2022Better Hit the Nail on the Head than Beat around the Bush: Removing Protected Attributes with a Single Projection8 Dec 2022
- 2022Log-linear Guardedness and its Implications18 Oct 2022
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2024Refusal in Language Models Is Mediated by a Single Direction17 Jun 2024
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 149
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 66
- 2023Shielded Representations: Protecting Sensitive Attributes Through Iterative Gradient-Based Projectioncited by 25
- 2023Efficient fair PCA for fair representation learningcited by 23
- 2022Better Hit the Nail on the Head than Beat around the Bush: Removing Protected Attributes with a Single Projectioncited by 17
- 2023Uncovering Intermediate Variables in Transformers using Circuit Probingcited by 12
- 2024How Reliable are Causal Probing Interventions?cited by 9
- 2023Erasure of Unaligned Attributes from Neural Representationscited by 6
- 2023A Joint Matrix Factorization Analysis of Multilingual Representationscited by 5
- 2025Fundamental Limits of Perfect Concept Erasurecited by 5
12 most cited of 28 All 28 (JSON)
- 2026Iterative Erasure Count Is Not an Affine-Invariant Concept Dimension11 Aug 2026
- 2026Debiasing Without Protected Attributes: Latent Concept Erasure from Textual Profiles10 Jun 2026
- 2026A framework for analyzing concept representations in neural models2 May 2026
- 2026From Measurement to Mitigation: Quantifying and Reducing Identity Leakage in Image Representation Encoders with Linear Subspace Removal7 Apr 2026
- 2026Obliviator Reveals the Cost of Nonlinear Guardedness in Concept Erasure8 Mar 2026
- 2025Incorporating Fairness Constraints into Archetypal Analysis16 Jul 2025
- 2025From Emergence to Control: Probing and Modulating Self-Reflection in Language Models13 Jun 2025
- 2025Convergent Linear Representations of Emergent Misalignment13 Jun 2025
- 2025Iterative Multilingual Spectral Attribute Erasure12 Jun 2025
- 2025Preserving Task-Relevant Information Under Linear Concept Removal12 Jun 2025
- 2025Fundamental Limits of Perfect Concept Erasure25 Mar 2025
- 2024Advancing Fairness in Natural Language Processing: From Traditional Methods to Explainability16 Oct 2024
12 newest of 28 All 28 (JSON)