Evaluating Copyright Takedown Methods for Language Models
Not on the map. Why?
Cited by 22 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Language models (LMs) derive their capabilities from extensive training on diverse data, including potentially copyrighted material. These models can memorize and generate content similar to their training data, posing potential concerns. Therefore, model creators are motivated to develop mitigation methods that prevent generating protected content. We term this procedure as copyright takedowns for LMs, noting the conceptual similarity to (but legal distinction from) the DMCA takedown This paper introduces the first evaluation of the feasibility and side effects of copyright takedowns for LMs. We propose CoTaEval, an evaluation framework to assess the effectiveness of copyright takedown methods, the impact on the model's ability to retain uncopyrightable factual knowledge from the training data whose recitation is embargoed, and how well the model maintains its general utility and efficiency. We examine several strategies, including adding system prompts, decoding-time filtering interventions, and unlearning approaches. Our findings indicate that no tested method excels across all metrics, showing significant room for research in this unique problem setting and indicating potential unresolved challenges for live policy proposals.
Key facts. Cited by 43 papers in the map (data through 14 Oct 2026). Builds on 51 of its 83 references that are in the map. First posted on arXiv 26 Jun 2024.
Builds on
51 of 83 references.
References · 51
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
- 2022LaMDA: Language Models for Dialog Applicationscited by 1,220
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
38 more
- 2023REPLUG: Retrieval-Augmented Black-Box Language Modelscited by 792
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
- 2016NewsQA: A Machine Comprehension Datasetcited by 331
- 2023Trusting Your Evidence: Hallucinate Less with Context-aware Decodingcited by 327
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 279
- 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2023RA-DIT: Retrieval-Augmented Dual Instruction Tuningcited by 195
- 2021BookSum: A Collection of Datasets for Long-form Narrative Summarizationcited by 184
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
- 2021Counterfactual Memorization in Neural Language Modelscited by 156
- 2022Continual Learning and Private Unlearningcited by 130
- 2023What's In My Big Data?cited by 129
- 2022Retrieval-Augmented Multimodal Language Modelingcited by 125
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 125
- 2023Foundation Models and Fair Usecited by 116
- 2023Copyright Violations and Large Language Modelscited by 108
- 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 100
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
- 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
- 2023SILO Language Models: Isolating Legal Risk In a Nonparametric Datastorecited by 71
- 2023The Foundation Model Transparency Indexcited by 66
- 2024Be like a Goldfish, Don't Memorize! Mitigating Memorization in Generative LLMscited by 50
- 2023Talkin' 'Bout AI Generation: Copyright and the Generative-AI Supply Chaincited by 46
- 2024Proving membership in LLM pretraining data via data watermarkscited by 40
- 2024SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generationcited by 34
- 2023Data Portraits: Recording Foundation Model Training Datacited by 30
- 2023How to Protect Copyright Data in Optimization of Large Language Models?cited by 26
- 2024Fantastic Copyrighted Beasts and How (Not) to Generate Themcited by 24
50 most cited of 51 All 51 (JSON)
Built on by
Citing papers per year: 2024: 12; 2025: 23; 2026: 8.
43 papers.
Sort:
By area:
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 123
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 117
- 2025MATH-Perturb: Benchmarking LLMs' Math Reasoning Abilities against Hard Perturbationscited by 89
- 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Datacited by 50
- 2025When One LLM Drools, Multi-LLM Collaboration Rulescited by 28
- 2024Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Modelscited by 27
- 2025NeuralOS: Towards Simulating Operating Systems via Neural Generative Modelscited by 19
- 2024Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuitcited by 18
- 2024Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracycited by 17
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 15
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awarenesscited by 14
31 more
- 2025Distillation Robustifies Unlearningcited by 11
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 9
- 2025R-TOFU: Unlearning in Large Reasoning Modelscited by 9
- 2024Copyright-Protected Language Generation via Adaptive Model Fusioncited by 7
- 2025ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Datacited by 6
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
- 2025Obliviate: Efficient Unmemorization for Protecting Intellectual Property in Large Language Modelscited by 5
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearningcited by 5
- 2024Strong Copyright Protection for Language Models via Adaptive Model Fusioncited by 4
- 2024Negative Token Merging: Image-based Adversarial Feature Guidancecited by 4
- 2025DUSK: Do Not Unlearn Shared Knowledgecited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 4
- 2025Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Modelscited by 4
- 2025Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detectioncited by 3
- 2025Tasks and Roles in Legal AI: Data Curation, Annotation, and Verificationcited by 3
- 2025SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMscited by 3
- 2025Beyond English: Unveiling Multilingual Bias in LLM Copyright Compliancecited by 2
- 2025Machine Text Detectors are Membership Inference Attackscited by 2
- 2024Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecturecited by 1
- 2025Interrogating LLM design under a fair learning doctrinecited by 1
- 2025Certified Mitigation of Worst-Case LLM Copyright Infringementcited by 1
- 2025Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraintcited by 1
- 2026Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failurescited by 1
- 2026Unsafe2Safe: Controllable Image Anonymization for Downstream Utilitycited by 1
- 2026Agentic Evaluation of Copyright Law Compliancecited by 1
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearningcited by 1
- 2025Nine Ways to Break Copyright Law and Why Our LLM Won't: A Fair Use Aligned Generation Frameworkcited by 0
- 2026EvoMU: Evolutionary Machine Unlearningcited by 0
- 2026We Should Separate Memorization from Copyrightcited by 0
- 2026On the Recoverability of Private Information Unlearning in Large Language Modelscited by 0
- 2026CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMscited by 0
- 2026CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMs1 Sep 2026
- 2026On the Recoverability of Private Information Unlearning in Large Language Models30 Aug 2026
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearning6 Aug 2026
- 2026Agentic Evaluation of Copyright Law Compliance23 Jul 2026
- 2026Unsafe2Safe: Controllable Image Anonymization for Downstream Utility30 Mar 2026
- 2026We Should Separate Memorization from Copyright9 Feb 2026
- 2026Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failures3 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2025Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Models19 Dec 2025
- 2025SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMs10 Nov 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Machine Text Detectors are Membership Inference Attacks22 Oct 2025
31 more
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Models16 Sep 2025
- 2025Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint28 Aug 2025
- 2025NeuralOS: Towards Simulating Operating Systems via Neural Generative Models11 Jul 2025
- 2025Distillation Robustifies Unlearning6 Jun 2025
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness6 Jun 2025
- 2025Nine Ways to Break Copyright Law and Why Our LLM Won't: A Fair Use Aligned Generation Framework25 May 2025
- 2025R-TOFU: Unlearning in Large Reasoning Models21 May 2025
- 2025DUSK: Do Not Unlearn Shared Knowledge21 May 2025
- 2025Certified Mitigation of Worst-Case LLM Copyright Infringement22 Apr 2025
- 2025ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Data20 Apr 2025
- 2025Tasks and Roles in Legal AI: Data Curation, Annotation, and Verification2 Apr 2025
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning29 Mar 2025
- 2025Interrogating LLM design under a fair learning doctrine22 Feb 2025
- 2025Obliviate: Efficient Unmemorization for Protecting Intellectual Property in Large Language Models20 Feb 2025
- 2025Beyond English: Unveiling Multilingual Bias in LLM Copyright Compliance14 Feb 2025
- 2025MATH-Perturb: Benchmarking LLMs' Math Reasoning Abilities against Hard Perturbations10 Feb 2025
- 2025When One LLM Drools, Multi-LLM Collaboration Rules6 Feb 2025
- 2025Improving LLM Unlearning Robustness via Random Perturbations31 Jan 2025
- 2025Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detection20 Jan 2025
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research9 Dec 2024
- 2024Copyright-Protected Language Generation via Adaptive Model Fusion9 Dec 2024
- 2024Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuit9 Dec 2024
- 2024Negative Token Merging: Image-based Adversarial Feature Guidance2 Dec 2024
- 2024On Memorization of Large Language Models in Logical Reasoning30 Oct 2024
- 2024Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracy12 Oct 2024
- 2024Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecture6 Oct 2024
- 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data29 Sep 2024
- 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep 2024
- 2024Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models20 Aug 2024
- 2024Strong Copyright Protection for Language Models via Adaptive Model Fusion29 Jul 2024
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul 2024
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 123
- 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Datacited by 50
- 2024Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Modelscited by 27
- 2024Unlearn and Burn: Adversarial Machine Unlearning Requests Destroy Model Accuracycited by 17
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 15
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awarenesscited by 14
- 2025Distillation Robustifies Unlearningcited by 11
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 9
- 2025Obliviate: Efficient Unmemorization for Protecting Intellectual Property in Large Language Modelscited by 5
- 2025DUSK: Do Not Unlearn Shared Knowledgecited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 4
12 most cited of 19 All 19 (JSON)
- 2026On the Recoverability of Private Information Unlearning in Large Language Models30 Aug 2026
- 2026GROM: Gradient-Free Rapid One-Shot Machine Unlearning6 Aug 2026
- 2026Rethinking Benign Relearning: Syntax as the Hidden Driver of Unlearning Failures3 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2025Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Models19 Dec 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Machine Text Detectors are Membership Inference Attacks22 Oct 2025
- 2025Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint28 Aug 2025
- 2025Distillation Robustifies Unlearning6 Jun 2025
- 2025Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness6 Jun 2025
- 2025DUSK: Do Not Unlearn Shared Knowledge21 May 2025
- 2025Obliviate: Efficient Unmemorization for Protecting Intellectual Property in Large Language Models20 Feb 2025
12 newest of 19 All 19 (JSON)
- 2025ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Datacited by 6
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearningcited by 5
- 2025Nine Ways to Break Copyright Law and Why Our LLM Won't: A Fair Use Aligned Generation Frameworkcited by 0
- 2026CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMscited by 0
- 2026CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMs1 Sep 2026
- 2025Nine Ways to Break Copyright Law and Why Our LLM Won't: A Fair Use Aligned Generation Framework25 May 2025
- 2025ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Data20 Apr 2025
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning29 Mar 2025
- 2026Agentic Evaluation of Copyright Law Compliancecited by 1
- 2026Agentic Evaluation of Copyright Law Compliance23 Jul 2026
- 2025When One LLM Drools, Multi-LLM Collaboration Rulescited by 28
- 2025NeuralOS: Towards Simulating Operating Systems via Neural Generative Modelscited by 19
- 2024Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuitcited by 18
- 2024Copyright-Protected Language Generation via Adaptive Model Fusioncited by 7
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Modelscited by 6
- 2024Strong Copyright Protection for Language Models via Adaptive Model Fusioncited by 4
- 2025Tasks and Roles in Legal AI: Data Curation, Annotation, and Verificationcited by 3
- 2025SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMscited by 3
- 2025Beyond English: Unveiling Multilingual Bias in LLM Copyright Compliancecited by 2
- 2024Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecturecited by 1
- 2025Interrogating LLM design under a fair learning doctrinecited by 1
- 2025Certified Mitigation of Worst-Case LLM Copyright Infringementcited by 1
12 most cited of 14 All 14 (JSON)
- 2026Unsafe2Safe: Controllable Image Anonymization for Downstream Utility30 Mar 2026
- 2026We Should Separate Memorization from Copyright9 Feb 2026
- 2025SCOPE: Intrinsic Semantic Space Control for Mitigating Copyright Infringement in LLMs10 Nov 2025
- 2025Beyond Data Privacy: New Privacy Risks for Large Language Models16 Sep 2025
- 2025NeuralOS: Towards Simulating Operating Systems via Neural Generative Models11 Jul 2025
- 2025Certified Mitigation of Worst-Case LLM Copyright Infringement22 Apr 2025
- 2025Tasks and Roles in Legal AI: Data Curation, Annotation, and Verification2 Apr 2025
- 2025Interrogating LLM design under a fair learning doctrine22 Feb 2025
- 2025Beyond English: Unveiling Multilingual Bias in LLM Copyright Compliance14 Feb 2025
- 2025When One LLM Drools, Multi-LLM Collaboration Rules6 Feb 2025
- 2024Copyright-Protected Language Generation via Adaptive Model Fusion9 Dec 2024
- 2024Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuit9 Dec 2024
12 newest of 14 All 14 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2024Avoiding Copyright Infringement via Large Language Model Unlearning
- 2024Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?
- 2024Purifying Large Language Models by Ensembling a Small Language Model
- 2024Investigating the Feasibility of Mitigating Potential Copyright Infringement via Large Language Model Unlearning
- 2025Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends
- 2025Bridging the Copyright Gap: Do Large Vision-Language Models Recognize and Respect Copyrighted Content?
- 2026Extracting books from production language models
- 2025A Statistical Hypothesis Testing Framework for Data Misappropriation Detection in Large Language Models