A Survey on Federated Unlearning: Challenges, Methods, and Future Directions
On the map: LLM safety and security → Federated unlearning and poisoning
Abstract (arXiv)
In recent years, the notion of ``the right to be forgotten" (RTBF) has become a crucial aspect of data privacy for digital trust and AI safety, requiring the provision of mechanisms that support the removal of personal data of individuals upon their requests. Consequently, machine unlearning (MU) has gained considerable attention which allows an ML model to selectively eliminate identifiable information. Evolving from MU, federated unlearning (FU) has emerged to confront the challenge of data erasure within federated learning (FL) settings, which empowers the FL model to unlearn an FL client or identifiable information pertaining to the client. Nevertheless, the distinctive attributes of federated learning introduce specific challenges for FU techniques. These challenges necessitate a tailored design when developing FU algorithms. While various concepts and numerous federated unlearning schemes exist in this field, the unified workflow and tailored design of FU are not yet well understood. Therefore, this comprehensive survey delves into the techniques and methodologies in FU providing an overview of fundamental concepts and principles, evaluating existing federated unlearning algorithms, and reviewing optimizations tailored to federated learning. Additionally, it discusses practical applications and assesses their limitations. Finally, it outlines promising directions for future research.
Key facts. Cited by 58 papers in the map (data through 7 Oct 2026). Placed in Federated unlearning and poisoning, one of 12 directions in LLM safety and security. First posted on arXiv 31 Oct 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 1; 2024: 19; 2025: 26; 2026: 12.
58 papers.
Sort:
By area:
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 34
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2025BLUR: A Bi-Level Optimization Approach for LLM Unlearningcited by 23
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2024Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Securitycited by 18
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
- 2025NoT: Federated Unlearning via Weight Negationcited by 15
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Methodcited by 14
- 2023QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillationcited by 11
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
38 more
- 2025ForgetMe: Evaluating Selective Forgetting in Generative Modelscited by 11
- 2025An Investigation into Value Misalignment in LLM-Generated Texts for Cultural Heritagecited by 8
- 2025Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearningcited by 8
- 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verificationcited by 8
- 2024Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learningcited by 7
- 2024Federated Unlearning: a Perspective of Stability and Fairnesscited by 7
- 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questionscited by 7
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosurecited by 5
- 2025Poisoning Attacks and Defenses to Federated Unlearningcited by 5
- 2025CoUn: Empowering Machine Unlearning via Contrastive Learningcited by 4
- 2024FedUHB: Accelerating Federated Unlearning via Polyak Heavy Ball Methodcited by 3
- 2024FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teachercited by 2
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservationcited by 2
- 2025Model Inversion Attack against Federated Unlearningcited by 2
- 2025Towards Efficient and Exact Forgetting Services in Pre-Trained-Model-based Continual Learningcited by 2
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directionscited by 2
- 2026Certified Unlearning in Decentralized Federated Learningcited by 2
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradientscited by 1
- 2025BadFU: Backdoor Federated Learning through Adversarial Machine Unlearningcited by 1
- 2025ToFU: Transforming How Federated Learning Systems Forget User Datacited by 1
- 2025Fully Decentralized Certified Unlearningcited by 1
- 2025Feature-Selective Representation Misdirection for Machine Unlearningcited by 1
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learningcited by 1
- 2026Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial Contributionscited by 1
- 2024A Survey on Federated Unlearning: Challenges and Opportunitiescited by 0
- 2024Machine Unlearning with Minimal Gradient Dependence for High Unlearning Ratioscited by 0
- 2024Forgetting Through Transforming: Enabling Federated Unlearning via Class-Aware Representation Transformationcited by 0
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficientcited by 0
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributionscited by 0
- 2025Sky of Unlearning (SoUL): Rewiring Federated Machine Unlearning via Selective Pruningcited by 0
- 2025DRAUN: An Algorithm-Agnostic Data Reconstruction Attack on Federated Unlearning Systemscited by 0
- 2025DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differencescited by 0
- 2025A Scenario-Oriented Survey of Federated Recommender Systems: Techniques, Challenges, and Future Directionscited by 0
- 2025Bringing Multi-Modal Multi-Task Federated Foundation Models to Education Domain: Prospects and Challengescited by 0
- 2025Towards Verifiable Federated Unlearning: Framework, Challenges, and The Road Aheadcited by 0
- 2025Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstructioncited by 0
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMscited by 0
- 2026Lethe: Principled Dual-Stream Update for Persistent Knowledge Erasure in Federated Unlearningcited by 0
50 most cited of 58 All 58 (JSON)
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuning22 Jun 2026
- 2026Rethinking Federated Unlearning via the Lens of Memorization23 May 2026
- 2026Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial Contributions19 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026A Taxonomy and Resolution Strategy for Client-Level Disagreements in Federated Learning25 Apr 2026
- 2026Bias Redistribution in Visual Machine Unlearning: Does Forgetting One Group Harm Another?9 Apr 2026
- 2026Lethe: Principled Dual-Stream Update for Persistent Knowledge Erasure in Federated Unlearning30 Jan 2026
- 2026Certified Unlearning in Decentralized Federated Learning10 Jan 2026
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs7 Jan 2026
38 more
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning29 Dec 2025
- 2025Feature-Selective Representation Misdirection for Machine Unlearning18 Dec 2025
- 2025Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstruction15 Dec 2025
- 2025Fully Decentralized Certified Unlearning9 Dec 2025
- 2025Towards Verifiable Federated Unlearning: Framework, Challenges, and The Road Ahead1 Oct 2025
- 2025CoUn: Empowering Machine Unlearning via Contrastive Learning19 Sep 2025
- 2025ToFU: Transforming How Federated Learning Systems Forget User Data19 Sep 2025
- 2025Bringing Multi-Modal Multi-Task Federated Foundation Models to Education Domain: Prospects and Challenges9 Sep 2025
- 2025A Scenario-Oriented Survey of Federated Recommender Systems: Techniques, Challenges, and Future Directions27 Aug 2025
- 2025BadFU: Backdoor Federated Learning through Adversarial Machine Unlearning21 Aug 2025
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions19 Aug 2025
- 2025DRAGD: A Federated Unlearning Data Reconstruction Attack Based on Gradient Differences13 Jul 2025
- 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verification18 Jun 2025
- 2025BLUR: A Bi-Level Optimization Approach for LLM Unlearning9 Jun 2025
- 2025DRAUN: An Algorithm-Agnostic Data Reconstruction Attack on Federated Unlearning Systems2 Jun 2025
- 2025Towards Efficient and Exact Forgetting Services in Pre-Trained-Model-based Continual Learning18 May 2025
- 2025ForgetMe: Evaluating Selective Forgetting in Generative Models17 Apr 2025
- 2025Federated Unlearning Made Practical: Seamless Integration via Negated Pseudo-Gradients8 Apr 2025
- 2025Sky of Unlearning (SoUL): Rewiring Federated Machine Unlearning via Selective Pruning2 Apr 2025
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols10 Mar 2025
- 2025NoT: Federated Unlearning via Weight Negation7 Mar 2025
- 2025Model Inversion Attack against Federated Unlearning20 Feb 2025
- 2025Ten Challenging Problems in Federated Foundation Models14 Feb 2025
- 2025Poisoning Attacks and Defenses to Federated Unlearning29 Jan 2025
- 2025Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning28 Jan 2025
- 2025An Investigation into Value Misalignment in LLM-Generated Texts for Cultural Heritage3 Jan 2025
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributions18 Dec 2024
- 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions17 Dec 2024
- 2024Streamlined Federated Unlearning: Unite as One to Be Highly Efficient28 Nov 2024
- 2024Efficient Federated Unlearning with Adaptive Differential Privacy Preservation17 Nov 2024
- 2024FedUHB: Accelerating Federated Unlearning via Polyak Heavy Ball Method17 Nov 2024
- 2024Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure14 Oct 2024
- 2024Forgetting Through Transforming: Enabling Federated Unlearning via Class-Aware Representation Transformation9 Oct 2024
- 2024FedQUIT: On-Device Federated Unlearning via a Quasi-Competent Virtual Teacher14 Aug 2024
- 2024Machine Unlearning with Minimal Gradient Dependence for High Unlearning Ratios24 Jun 2024
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Method24 May 2024
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity23 May 2024
- 2024Machine Unlearning: A Comprehensive Survey13 May 2024
50 newest of 58 All 58 (JSON)
- 2024Threats, Attacks, and Defenses in Machine Unlearning: A Surveycited by 34
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2024Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metricscited by 25
- 2025BLUR: A Bi-Level Optimization Approach for LLM Unlearningcited by 23
- 2025Ten Challenging Problems in Federated Foundation Modelscited by 20
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocolscited by 16
- 2025NoT: Federated Unlearning via Weight Negationcited by 15
- 2024Unlearning during Learning: An Efficient Federated Machine Unlearning Methodcited by 14
- 2023QuickDrop: Efficient Federated Unlearning by Integrated Dataset Distillationcited by 11
- 2024Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivitycited by 11
- 2025Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearningcited by 8
- 2025Towards Reliable Forgetting: A Survey on Machine Unlearning Verificationcited by 8
12 most cited of 46 All 46 (JSON)
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats23 Jun 2026
- 2026FedUP: One-Shot Federated Unlearning via Centroid-Guided Plug-in Filters23 Jun 2026
- 2026Priority-Aware Learning-Unlearning Correction for Dynamic Decentralized LoRA Fine-Tuning22 Jun 2026
- 2026Rethinking Federated Unlearning via the Lens of Memorization23 May 2026
- 2026Causal Unlearning in Collaborative Optimization: Exact and Approximate Influence Reversal under Adversarial Contributions19 May 2026
- 2026Behavioral Guarantees for Proxy-Based Unlearning11 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026Bias Redistribution in Visual Machine Unlearning: Does Forgetting One Group Harm Another?9 Apr 2026
- 2026Lethe: Principled Dual-Stream Update for Persistent Knowledge Erasure in Federated Unlearning30 Jan 2026
- 2026Certified Unlearning in Decentralized Federated Learning10 Jan 2026
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs7 Jan 2026
- 2025Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning29 Dec 2025
12 newest of 46 All 46 (JSON)
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb 2024
- 2025An Investigation into Value Misalignment in LLM-Generated Texts for Cultural Heritagecited by 8
- 2024Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learningcited by 7
- 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questionscited by 7
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directionscited by 2
- 2025BadFU: Backdoor Federated Learning through Adversarial Machine Unlearningcited by 1
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributionscited by 0
- 2025A Scenario-Oriented Survey of Federated Recommender Systems: Techniques, Challenges, and Future Directionscited by 0
- 2025Bringing Multi-Modal Multi-Task Federated Foundation Models to Education Domain: Prospects and Challengescited by 0
- 2026A Taxonomy and Resolution Strategy for Client-Level Disagreements in Federated Learningcited by 0
- 2026A Taxonomy and Resolution Strategy for Client-Level Disagreements in Federated Learning25 Apr 2026
- 2025Bringing Multi-Modal Multi-Task Federated Foundation Models to Education Domain: Prospects and Challenges9 Sep 2025
- 2025A Scenario-Oriented Survey of Federated Recommender Systems: Techniques, Challenges, and Future Directions27 Aug 2025
- 2025BadFU: Backdoor Federated Learning through Adversarial Machine Unlearning21 Aug 2025
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions19 Aug 2025
- 2025An Investigation into Value Misalignment in LLM-Generated Texts for Cultural Heritage3 Jan 2025
- 2024Federated Unlearning Model Recovery in Data with Skewed Label Distributions18 Dec 2024
- 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions17 Dec 2024
- 2024Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learning16 Jan 2024