mlsanityData to 7 Oct 2026

Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspective

arXiv 2407.16997 ↗First posted 24 Jul 2024cs.CLcited by 33

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

This paper investigates Who's Harry Potter (WHP), a pioneering yet insufficiently understood method for LLM unlearning. We explore it in two steps. First, we introduce a new task of LLM targeted unlearning, where given an unlearning target (e.g., a person) and some unlearning documents, we aim to unlearn only the information about the target, rather than everything in the unlearning documents. We further argue that a successful unlearning should satisfy criteria such as not outputting gibberish, not fabricating facts about the unlearning target, and not releasing factual information under jailbreak attacks. Second, we construct a causal intervention framework for targeted unlearning, where the knowledge of the unlearning target is modeled as a confounder between LLM input and output, and the unlearning process as a deconfounding process. This framework justifies and extends WHP, deriving a simple unlearning algorithm that includes WHP as a special case. Experiments on existing and new datasets show that our approach, without explicitly optimizing for the aforementioned criteria, achieves competitive performance in all of them. Our code is available at https://github.com/UCSB-NLP-Chang/causal_unlearn.git.

Key facts. Cited by 33 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 35 of its 62 references that are in the map. First posted on arXiv 24 Jul 2024.

Builds on

35 of 62 references.

Closest ancestors · 16

Same direction, newest first

  1. 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
  2. 2024To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models6 May
  3. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  4. 2024Guardrail Baselines for Unlearning in LLMs5 Mar
  5. 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
  6. 2024Towards Safer Large Language Models through Machine Unlearning15 Feb
  7. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  8. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
  9. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  10. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  11. 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
  12. 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
4 more
  1. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  2. 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
  3. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
  4. 2021Machine Unlearning of Features and Labels26 Aug

Other references · 19

  1. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  2. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  3. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  4. 2020Stanza: A Python Natural Language Processing Toolkit for Many Human Languagescited by 719
  5. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  6. 2023Erasing Concepts from Diffusion Modelscited by 530
  7. 2019Certified Data Removal from Machine Learning Modelscited by 512
  8. 2019Neural Text Generation with Unlikelihood Trainingcited by 489
  9. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
  10. 2021Entity-Based Knowledge Conflicts in Question Answeringcited by 349
  11. 2020Amnesiac Machine Learningcited by 305
  12. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
7 more
  1. 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
  2. 2022Are Large Pre-Trained Language Models Leaking Your Personal Information?cited by 195
  3. 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
  4. 2021Federated Unlearning via Class-Discriminative Pruningcited by 108
  5. 2023Identifying and Mitigating the Security Risks of Generative AIcited by 90
  6. 2024Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Spacecited by 88
  7. 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 43

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 2; 2025: 21; 2026: 10.

33 papers.

Sort:

By area:

  1. 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
  2. 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyondcited by 76
  3. 2024LLM Unlearning via Loss Adjustment with Only Forget Datacited by 71
  4. 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Modelscited by 29
  5. 2024UnStar: Unlearning with Self-Taught Anti-Sample Reasoning for LLMscited by 14
  6. 2025Which Retain Set Matters for LLM Unlearning? A Case Study on Entity Unlearningcited by 14
  7. 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarkscited by 11
  8. 2025Unlearning vs. Obfuscation: Are We Truly Removing Knowledge?cited by 11
  9. 2025UIPE: Enhancing LLM Unlearning by Removing Knowledge Related to Forgetting Targetscited by 10
  10. 2025Agents Are All You Need for LLM Unlearningcited by 9
  11. 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Modelscited by 9
  12. 2025SoK: Machine Unlearning for Large Language Modelscited by 9
21 more
  1. 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steeringcited by 9
  2. 2025OFFSIDE: Benchmarking Unlearning Misinformation in Multimodal Large Language Modelscited by 7
  3. 2025Not All Tokens Are Meant to Be Forgottencited by 6
  4. 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
  5. 2025Distribution Preference Optimization: A Fine-grained Perspective for LLM Unlearningcited by 3
  6. 2026RAZOR: Ratio-Aware Layer Editing for Targeted Unlearning in Vision Transformers and Diffusion Modelscited by 3
  7. 2026CAP: Controllable Alignment Prompting for Unlearning in LLMscited by 3
  8. 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
  9. 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
  10. 2025A Survey on Unlearning in Large Language Modelscited by 2
  11. 2026Inference-time Unlearning Using Conformal Predictioncited by 2
  12. 2025Learning-Time Encoding Shapes Unlearning in LLMscited by 1
  13. 2025Standard vs. Modular Sampling: Best Practices for Reliable LLM Unlearningcited by 1
  14. 2026Beyond Superficial Unlearning: Sharpness-Aware Robust Erasure of Hallucinations in Multimodal LLMscited by 1
  15. 2026Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implicationscited by 1
  16. 2025RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearningcited by 0
  17. 2026FIT to Forget: Robust Continual Unlearning for Large Language Modelscited by 0
  18. 2026Privacy and Safety Experiences and Concerns of U.S. Women Using Generative AI for Seeking Sexual and Reproductive Health Informationcited by 0
  19. 2026MLUBench: A Benchmark for Lifelong Unlearning Evaluation in MLLMscited by 0
  20. 2026Unlearning as Distribution Restoration: A Controlled Counterfactual Study, a Validated Selective Screen, and the Limits of Oracle-Free Certificationcited by 0
  21. 2026Storage Is Not Strategy: State-Conditioned Support Control for LLM Unlearningcited by 0