mlsanityData to 7 Oct 2026

Unlearning Protected User Attributes in Recommendations with Adversarial Training

arXiv 2206.04500 ↗First posted 9 Jun 2022cs.IR cs.AI cs.CRcited by 19

On the map: LLM safety and security → Membership inference attacks

Abstract (arXiv)

Collaborative filtering algorithms capture underlying consumption patterns, including the ones specific to particular demographics or protected information of users, e.g. gender, race, and location. These encoded biases can influence the decision of a recommendation system (RS) towards further separation of the contents provided to various demographic subgroups, and raise privacy concerns regarding the disclosure of users' protected attributes. In this work, we investigate the possibility and challenges of removing specific protected information of users from the learned interaction representations of a RS algorithm, while maintaining its effectiveness. Specifically, we incorporate adversarial training into the state-of-the-art MultVAE architecture, resulting in a novel model, Adversarial Variational Auto-Encoder with Multinomial Likelihood (Adv-MultVAE), which aims at removing the implicit information of protected attributes while preserving recommendation performance. We conduct experiments on the MovieLens-1M and LFM-2b-DemoBias datasets, and evaluate the effectiveness of the bias mitigation method based on the inability of external attackers in revealing the users' gender information from the model. Comparing with baseline MultVAE, the results show that Adv-MultVAE, with marginal deterioration in performance (w.r.t. NDCG and recall), largely mitigates inherent biases in the model on both datasets.

Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 21 of its 36 references that are in the map. First posted on arXiv 9 Jun 2022.

Builds on

21 of 36 references.

References · 21

  1. 2022Generative Adversarial Networkscited by 5,603
  2. 2013Auto-Encoding Variational Bayescited by 3,980
  3. 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
  4. 2018Mitigating Unwanted Biases with Adversarial Learningcited by 663
  5. 2018Variational Autoencoders for Collaborative Filteringcited by 308
  6. 2019Are We Really Making Much Progress? A Worrying Analysis of Recent Neural Recommendation Approachescited by 181
  7. 2018Adversarial Removal of Demographic Attributes from Text Datacited by 166
  8. 2017Controllable Invariance through Adversarial Feature Learningcited by 127
  9. 2021Learning Fair Representations for Recommendation: A Graph-based Perspectivecited by 50
  10. 2020Exploring Data Splitting Strategies for the Evaluation of Recommendation Modelscited by 48
  11. 2020FairRec: Fairness-aware News Recommendation with Decomposed Adversarial Learningcited by 44
  12. 2021Personalized Counterfactual Fairness in Recommendationcited by 38
9 more
  1. 2021Societal Biases in Retrieved Contents: Measurement Framework and Adversarial Mitigation for BERT Rankerscited by 34
  2. 2018Exploring Author Gender in Book Rating and Recommendationcited by 29
  3. 2020Do Neural Ranking Models Intensify Gender Bias?cited by 28
  4. 2019Privacy-Aware Recommendation with Private-Attribute Protection using Adversarial Learningcited by 21
  5. 2022Grep-BiasIR: A Dataset for Investigating Gender Representation-Bias in Information Retrieval Resultscited by 17
  6. 2019I Am Not What I Write: Privacy Preserving Text Representation Learningcited by 12
  7. 2021Inequality and Inequity in Network-based Ranking and Recommendation Algorithmscited by 7
  8. 2022Do Perceived Gender Biases in Retrieval Results Affect Relevance Judgements?cited by 3
  9. 2019Allowing for equal opportunities for artists in music recommendationcited by 2

Built on by

Cited by year

Citing papers per year: 2022: 2; 2023: 3; 2024: 10; 2025: 4.

19 papers.

Sort:

By area:

  1. 2022A Survey of Machine Unlearningcited by 298
  2. 2023Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomycited by 44
  3. 2024Machine Unlearning: A Comprehensive Surveycited by 33
  4. 2023Parameter-efficient Modularised Bias Mitigation via AdapterFusioncited by 25
  5. 2024Towards Trustworthy AI: A Review of Ethical and Robust Large Language Modelscited by 21
  6. 2022Efficient Bi-Level Optimization for Recommendation Denoisingcited by 20
  7. 2024Towards Efficient and Effective Unlearning of Large Language Models for Recommendationcited by 16
  8. 2023Making Users Indistinguishable: Attribute-wise Unlearning in Recommender Systemscited by 15
  9. 2024Machine Unlearning for Recommendation Systems: An Insightcited by 9
  10. 2024Effective Controllable Bias Mitigation for Classification and Retrieval using Gate Adapterscited by 8
  11. 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questionscited by 7
  12. 2024CURE4Rec: A Benchmark for Recommendation Unlearning with Deeper Influencecited by 6
7 more
  1. 2024Multi-Modal Recommendation Unlearning for Legal, Licensing, and Modality Constraintscited by 5
  2. 2025FROG: Fair Removal on Graphscited by 4
  3. 2024Simultaneous Unlearning of Multiple Protected User Attributes From Variational Autoencoder Recommenders Using Adversarial Trainingcited by 3
  4. 2024Machine unlearning through fine-grained model parameters perturbationcited by 2
  5. 2025Privacy-Utility-Bias Trade-offs for Privacy-Preserving Recommender Systemscited by 2
  6. 2025RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systemscited by 1
  7. 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systemscited by 0