On the Limitations and Prospects of Machine Unlearning for Generative AI
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Generative AI (GenAI), which aims to synthesize realistic and diverse data samples from latent variables or other data modalities, has achieved remarkable results in various domains, such as natural language, images, audio, and graphs. However, they also pose challenges and risks to data privacy, security, and ethics. Machine unlearning is the process of removing or weakening the influence of specific data samples or features from a trained model, without affecting its performance on other data or tasks. While machine unlearning has shown significant efficacy in traditional machine learning tasks, it is still unclear if it could help GenAI become safer and aligned with human desire. To this end, this position paper provides an in-depth discussion of the machine unlearning approaches for GenAI. Firstly, we formulate the problem of machine unlearning tasks on GenAI and introduce the background. Subsequently, we systematically examine the limitations of machine unlearning on GenAI models by focusing on the two representative branches: LLMs and image generative (diffusion) models. Finally, we provide our prospects mainly from three aspects: benchmark, evaluation metrics, and utility-unlearning trade-off, and conscientiously advocate for the future development of this field.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 38 of its 46 references that are in the map. First posted on arXiv 1 Aug 2024.
Builds on
38 of 46 references.
Closest ancestors · 11
Same direction, newest first
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Knowledge Unlearning for LLMs: Tasks, Methods, and Challenges27 Nov
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2021Fast Yet Effective Machine Unlearning17 Nov
Other references · 27
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2020Gradient Surgery for Multi-Task Learningcited by 1,210
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Machine Unlearningcited by 1,020
- 2021Membership Inference Attacks From First Principlescited by 839
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2023An Empirical Study of Catastrophic Forgetting in Large Language Models During Continual Fine-tuningcited by 622
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2023Unified Concept Editing in Diffusion Modelscited by 377
15 more
- 2023A Survey of Hallucination in Large Foundation Modelscited by 365
- 2022Prompt-aligned Gradient for Prompt Tuningcited by 339
- 2023Ablating Concepts in Text-to-Image Diffusion Modelscited by 312
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2022A Review on Language Models as Knowledge Basescited by 156
- 2023Investigating the Catastrophic Forgetting in Multimodal Large Language Modelscited by 119
- 2023Membership Inference Attacks against Diffusion Modelscited by 84
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradientcited by 69
- 2022Membership Inference Attacks Against Text-to-image Generation Modelscited by 66
- 2024Erasing Undesirable Influence in Diffusion Modelscited by 52
- 2022A survey of multimodal deep generative modelscited by 47
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2023Towards More Realistic Membership Inference Attacks on Large Diffusion Modelscited by 41
- 2023Gradient Surgery for One-shot Unlearning on Generative Modelcited by 11
Built on by
Citing papers per year: 2025: 10; 2026: 2.
12 papers.
- 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 20
- 2026Maximizing Local Entropy Where It Matters: Prefix-Aware Localized LLM Unlearningcited by 10
- 2025Position: Bridge the Gaps between Machine Unlearning and AI Regulationcited by 5
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgerycited by 5
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directionscited by 2
- 2025ZJUKLAB at SemEval-2025 Task 4: Unlearning via Model Mergingcited by 2
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
- 2025A Survey on Unlearning in Large Language Modelscited by 2
- 2025Selective, Controlled and Domain-Agnostic Unlearning in Pretrained CLIP: A Training- and Data-Free Approachcited by 2
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Modelscited by 1
- 2025GIFT: Gradient-aware Immunization of diffusion models against malicious Fine-Tuning with safe concepts retentioncited by 0
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMscited by 0
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs7 Jan 2026
- 2026Maximizing Local Entropy Where It Matters: Prefix-Aware Localized LLM Unlearning6 Jan 2026
- 2025Erasing CLIP Memories: Non-Destructive, Data-Free Zero-Shot class Unlearning in CLIP Models16 Dec 2025
- 2025Selective, Controlled and Domain-Agnostic Unlearning in Pretrained CLIP: A Training- and Data-Free Approach16 Dec 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery25 Oct 2025
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning30 Sep 2025
- 2025GIFT: Gradient-aware Immunization of diffusion models against malicious Fine-Tuning with safe concepts retention18 Jul 2025
- 2025ZJUKLAB at SemEval-2025 Task 4: Unlearning via Model Merging27 Mar 2025
- 2025Exploring Incremental Unlearning: Techniques, Challenges, and Future Directions23 Feb 2025
- 2025Position: Bridge the Gaps between Machine Unlearning and AI Regulation18 Feb 2025
- 2025ReLearn: Unlearning via Learning for Large Language Models16 Feb 2025