DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonal
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine learning models trained on sensitive or private data can inadvertently memorize and leak that information. Machine unlearning seeks to retroactively remove such details from model weights to protect privacy. We contribute a lightweight unlearning algorithm that leverages the Fisher Information Matrix (FIM) for selective forgetting. Prior work in this area requires full retraining or large matrix inversions, which are computationally expensive. Our key insight is that the diagonal elements of the FIM, which measure the sensitivity of log-likelihood to changes in weights, contain sufficient information for effective forgetting. Specifically, we compute the FIM diagonal over two subsets -- the data to retain and forget -- for all trainable weights. This diagonal representation approximates the complete FIM while dramatically reducing computation. We then use it to selectively update weights to maximize forgetting of the sensitive subset while minimizing impact on the retained subset. Experiments show that our algorithm can successfully forget any randomly selected subsets of training data across neural network architectures. By leveraging the FIM diagonal, our approach provides an interpretable, lightweight, and efficient solution for machine unlearning with practical privacy benefits.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 20 of its 33 references that are in the map. First posted on arXiv 17 Nov 2023.
Builds on
20 of 33 references.
Closest ancestors · 10
Same direction, newest first
- 2023Unlearning with Fisher Masking9 Oct
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2022Deep Regression Unlearning15 Oct
- 2022A Survey of Machine Unlearning6 Sep
- 2022An Introduction to Machine Unlearning2 Sep
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
- 2022Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representations27 Feb
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
Other references · 10
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
- 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2020Amnesiac Machine Learningcited by 319
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 163
- 2020DeltaGrad: Rapid retraining of machine learning modelscited by 149
- 2022Generative Extraction of Audio Classifiers for Speaker Identificationcited by 1
Built on by
Citing papers per year: 2024: 1; 2025: 5; 2026: 1.
7 papers.
- 2026Machine Unlearning under Retain-Forget Entanglementcited by 11
- 2025Forget-MI: Machine Unlearning for Forgetting Multimodal Information in Healthcare Settingscited by 3
- 2025Module-Aware Parameter-Efficient Machine Unlearning on Transformerscited by 3
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometricscited by 2
- 2024Remembering Everything Makes You Vulnerable: A Limelight on Machine Unlearning for Personalized Healthcare Sectorcited by 0
- 2025FiCABU: A Fisher-Based, Context-Adaptive Machine Unlearning Processor for Edge AIcited by 0
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
- 2026Machine Unlearning under Retain-Forget Entanglement27 Mar 2026
- 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearning4 Dec 2025
- 2025FiCABU: A Fisher-Based, Context-Adaptive Machine Unlearning Processor for Edge AI6 Nov 2025
- 2025Module-Aware Parameter-Efficient Machine Unlearning on Transformers24 Aug 2025
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometrics29 Jul 2025
- 2025Forget-MI: Machine Unlearning for Forgetting Multimodal Information in Healthcare Settings29 Jun 2025
- 2024Remembering Everything Makes You Vulnerable: A Limelight on Machine Unlearning for Personalized Healthcare Sector5 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening
- 2023One-Shot Machine Unlearning with Mnemonic Code
- 2024AdaProb: Efficient Machine Unlearning via Adaptive Probability
- 2024Machine Unlearning using Forgetting Neural Networks
- 2026Unmerge: Efficient Machine Unlearning via Task Arithmetic
- 2023CovarNav: Machine Unlearning via Model Inversion and Covariance Navigation
- 2024Machine unlearning through fine-grained model parameters perturbation
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs