Unlearn What You Want to Forget: Efficient Unlearning for LLMs
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Large language models (LLMs) have achieved significant progress from pre-training on and memorizing a wide range of textual data, however, this process might suffer from privacy issues and violations of data protection regulations. As a result, the ability to easily remove data related to individual users from such models while not deteriorating their predictive quality after the removal becomes increasingly important. To address these issues, in this work, we propose an efficient unlearning framework that could efficiently update LLMs without having to retrain the whole model after data removals, by introducing lightweight unlearning layers learned with a selective teacher-student objective into the transformers. In addition, we introduce a fusion mechanism to effectively combine different unlearning layers that learns to forget different sets of data to handle a sequence of forgetting operations. Experiments on classification and generation tasks demonstrate the effectiveness of our proposed methods compared to the state-of-the-art baselines.
Key facts. Cited by 211 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 38 of its 46 references that are in the map. First posted on arXiv 31 Oct 2023.
Builds on
38 of 46 references.
Closest ancestors · 3
Same direction, newest first
- 2022Privacy Adhering Machine Un-learning in NLP19 Dec
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 35
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
- 2016Deep Learning with Differential Privacycited by 2,682
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2020Extracting Training Data from Large Language Modelscited by 2,144
23 more
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,462
- 2022Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?cited by 1,413
- 2022Solving Quantitative Reasoning Problems with Language Modelscited by 1,359
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2023LIMA: Less Is More for Alignmentcited by 1,080
- 2019Machine Unlearningcited by 1,020
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2021Knowledge Neurons in Pretrained Transformerscited by 590
- 2022Using DeepSpeed and Megatron to Train Megatron-Turing NLG 530B, A Large-Scale Generative Language Modelcited by 557
- 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 530
- 2021Fast Model Editing at Scalecited by 491
- 2023Is ChatGPT a General-Purpose Natural Language Processing Task Solver?cited by 486
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2021Do Prompt-Based Models Really Understand the Meaning of their Prompts?cited by 324
- 2020K-Adapter: Infusing Knowledge into Pre-Trained Models with Adapterscited by 318
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2017What do Neural Machine Translation Models Learn about Morphology?cited by 165
- 2021Entailment as Few-Shot Learnercited by 122
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2021Large-Scale Differentially Private BERTcited by 117
- 2023Parameter-Efficient Fine-Tuning Design Spacescited by 67
Built on by
Citing papers per year: 2023: 3; 2024: 101; 2025: 70; 2026: 37.
211 papers.
Sort:
By area:
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2024A Comprehensive Study of Knowledge Editing for Large Language Modelscited by 157
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2024Continual Learning for Large Language Models: A Surveycited by 144
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 134
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 118
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 113
- 2024Large Language Model Unlearning via Embedding-Corrupted Promptscited by 112
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
38 more
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Differencecited by 85
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 81
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Modelscited by 77
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 76
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
- 2024Knowledge Circuits in Pretrained Transformerscited by 60
- 2024Demystifying Verbatim Memorization in Large Language Modelscited by 55
- 2024Larimar: Large Language Models with Episodic Memory Controlcited by 53
- 2024On Large Language Model Continual Unlearningcited by 51
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Modelscited by 49
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2025LLM-based Agents Suffer from Hallucinations: A Survey of Taxonomy, Methods, and Directionscited by 49
- 2024Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledgecited by 48
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Modelscited by 44
- 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Stepscited by 43
- 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Modelscited by 42
- 2024Soft Prompting for Unlearning in Large Language Modelscited by 42
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2024Digital Forgetting in Large Language Models: A Survey of Unlearning Methodscited by 38
- 2025LLM Unlearning via Neural Activation Redirectioncited by 38
- 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challengescited by 37
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMscited by 36
- 2024CLEAR: Character Unlearning in Textual and Visual Modalitiescited by 36
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2024Low-Rank Adaptation for Foundation Models: A Comprehensive Reviewcited by 35
- 2024Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localizationcited by 34
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMscited by 33
- 2024Offset Unlearning for Large Language Modelscited by 33
- 2024SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generationcited by 33
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 33
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Modelscited by 32
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2024Unlearning as multi-task optimization: A normalized gradient difference approach with an adaptive learning ratecited by 29
- 2024Intrinsic Test of Unlearning Using Parametric Knowledge Tracescited by 28
- 2024Corrective Machine Unlearningcited by 26
50 most cited of 211 All 211 (JSON)
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Eternal Sunshine of the Spotless Mind: Systematically Erasing LLM's Memories29 Sep 2026
- 2026Test-Time Unlearning via Sparse Autoencoder14 Sep 2026
- 2026Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs9 Sep 2026
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning1 Sep 2026
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearning6 Aug 2026
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget15 Jun 2026
- 2026Routing-Aware Expert Calibration for Machine Unlearning in Mixture-of-Experts Language Models9 Jun 2026
- 2026Fast Unlearning at Scale via Margin Self-Correction1 Jun 2026
- 2026How Hard Can It Be? Hardness-Aware Multi-Objective Unlearning1 Jun 2026
38 more
- 2026De-attribute to Forget for LLM Unlearning29 May 2026
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rules26 May 2026
- 2026DurableUn: Quantization-Induced Recovery Attacks in Machine Unlearning4 May 2026
- 2026Unlearning What Matters: Token-Level Attribution for Precise Language Model Unlearning1 May 2026
- 2026Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation6 Apr 2026
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agents1 Apr 2026
- 2026A Comprehensive Evaluation of LLM Unlearning Robustness under Multi-Turn Interaction28 Feb 2026
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients16 Feb 2026
- 2026Explainable LLM Unlearning Through Reasoning8 Feb 2026
- 2026Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearning6 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026Inference-time Unlearning Using Conformal Prediction3 Feb 2026
- 2026Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failures3 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2026SAU: Sparsity-Aware Unlearning for LLMs via Gradient Masking and Importance Redistribution31 Jan 2026
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher29 Jan 2026
- 2026GRIP: Algorithm-Agnostic Machine Unlearning for Mixture-of-Experts via Geometric Router Constraints23 Jan 2026
- 2026QUAIL: Quantization Aware Unlearning for Mitigating Misinformation in LLMs21 Jan 2026
- 2026FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning20 Jan 2026
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges19 Jan 2026
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2026Forgetting Similar Samples: Can Machine Unlearning Do it Better?11 Jan 2026
- 2026Multilingual Amnesia: On the Transferability of Unlearning in Multilingual LLMs9 Jan 2026
- 2026Maximizing Local Entropy Where It Matters: Prefix-Aware Localized LLM Unlearning6 Jan 2026
- 2026UnPII: Unlearning Personally Identifiable Information with Quantifiable Exposure Risk5 Jan 2026
- 2025CTIGuardian: A Few-Shot Framework for Mitigating Privacy Leakage in Fine-Tuned LLMs15 Dec 2025
- 2025Recover-to-Forget: Gradient Reconstruction from LoRA for Efficient LLM Unlearning8 Dec 2025
- 2025Delete and Retain: Efficient Unlearning for Document Classification6 Dec 2025
- 2025Randomized Masked Finetuning: An Efficient Way to Mitigate Memorization of PIIs in LLMs2 Dec 2025
- 2025SineProject: Machine Unlearning for Stable Vision Language Alignment23 Nov 2025
- 2025Geometric-disentangelment Unlearning21 Nov 2025
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective11 Nov 2025
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting20 Oct 2025
- 2025Cross-Modal Attention Guided Unlearning in Vision-Language Models8 Oct 2025
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearning6 Oct 2025
50 newest of 211 All 211 (JSON)
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 134
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 118
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 113
- 2024Large Language Model Unlearning via Embedding-Corrupted Promptscited by 112
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Differencecited by 85
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearningcited by 81
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Modelscited by 77
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 76
- 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
12 most cited of 149 All 149 (JSON)
- 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearning29 Sep 2026
- 2026Test-Time Unlearning via Sparse Autoencoder14 Sep 2026
- 2026Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs9 Sep 2026
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning1 Sep 2026
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearning6 Aug 2026
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
- 2026Auditing Machine Unlearning: A Systematic Research on Whether Models Truly Forget15 Jun 2026
- 2026Fast Unlearning at Scale via Margin Self-Correction1 Jun 2026
- 2026How Hard Can It Be? Hardness-Aware Multi-Objective Unlearning1 Jun 2026
- 2026De-attribute to Forget for LLM Unlearning29 May 2026
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rules26 May 2026
- 2026DurableUn: Quantization-Induced Recovery Attacks in Machine Unlearning4 May 2026
12 newest of 149 All 149 (JSON)
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Stepscited by 43
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMscited by 36
- 2024Unified Parameter-Efficient Unlearning for LLMscited by 24
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026Explainable LLM Unlearning Through Reasoningcited by 7
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agentscited by 1
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agents1 Apr 2026
- 2026Explainable LLM Unlearning Through Reasoning8 Feb 2026
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Steps20 Feb 2025
- 2024Unified Parameter-Efficient Unlearning for LLMs30 Nov 2024
- 2024Towards Robust and Parameter-Efficient Knowledge Unlearning for LLMs13 Aug 2024
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb 2024
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Modelscited by 32
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Modelscited by 21
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patchingcited by 16
- 2025Safety Alignment via Constrained Knowledge Unlearningcited by 13
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearningcited by 4
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearningcited by 3
- 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearning6 Oct 2025
- 2025Safety Alignment via Constrained Knowledge Unlearning24 May 2025
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning29 Mar 2025
- 2024A Probabilistic Perspective on Unlearning and Alignment for Large Language Models4 Oct 2024
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep 2024
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching22 May 2024
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr 2024
- 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Modelscited by 44
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?cited by 22
- 2025SineProject: Machine Unlearning for Stable Vision Language Alignmentcited by 3
- 2025Cross-Modal Attention Guided Unlearning in Vision-Language Modelscited by 1
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearningcited by 0
- 2026Unlearning Under Imbalance: Benchmarking Fairness in Multimodal LLM Unlearning23 Jul 2026
- 2025SineProject: Machine Unlearning for Stable Vision Language Alignment23 Nov 2025
- 2025Cross-Modal Attention Guided Unlearning in Vision-Language Models8 Oct 2025
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May 2024
- 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models21 May 2024
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 118
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Modelscited by 47
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 9
- 2024Unlearning Concepts from Text-to-Video Diffusion Modelscited by 6
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective11 Nov 2025
- 2024Unlearning Concepts from Text-to-Video Diffusion Models19 Jul 2024
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb 2024
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov 2023
- 2024A Comprehensive Study of Knowledge Editing for Large Language Modelscited by 157
- 2024Continual Learning for Large Language Models: A Surveycited by 144
- 2024Knowledge Circuits in Pretrained Transformerscited by 60
- 2024Demystifying Verbatim Memorization in Large Language Modelscited by 55
- 2024Larimar: Large Language Models with Episodic Memory Controlcited by 53
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2024Low-Rank Adaptation for Foundation Models: A Comprehensive Reviewcited by 35
- 2024SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generationcited by 33
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2024Learnable Privacy Neurons Localization in Language Modelscited by 26
- 2024Do LLMs "know" internally when they follow instructions?cited by 25
12 most cited of 32 All 32 (JSON)
- 2026Eternal Sunshine of the Spotless Mind: Systematically Erasing LLM's Memories29 Sep 2026
- 2025Randomized Masked Finetuning: An Efficient Way to Mitigate Memorization of PIIs in LLMs2 Dec 2025
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems12 Sep 2025
- 2025Uncovering Scaling Laws for Large Language Models via Inverse Problems9 Sep 2025
- 2025The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Models8 Jul 2025
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target2 Jun 2025
- 2025On the creation of narrow AI: hierarchy and nonlocality of neural network skills21 May 2025
- 2025Proactive Privacy Amnesia for Large Language Models: Safeguarding PII with Negligible Impact on Model Utility24 Feb 2025
- 2024Low-Rank Adaptation for Foundation Models: A Comprehensive Review31 Dec 2024
- 2024Copyright-Protected Language Generation via Adaptive Model Fusion9 Dec 2024
- 2024Cross-model Control: Improving Multiple Large Language Models in One-time Training23 Oct 2024
- 2024Do LLMs "know" internally when they follow instructions?18 Oct 2024
12 newest of 32 All 32 (JSON)