LLM Unlearning via Loss Adjustment with Only Forget Data
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Unlearning in Large Language Models (LLMs) is essential for ensuring ethical and responsible AI use, especially in addressing privacy leak, bias, safety, and evolving regulations. Existing approaches to LLM unlearning often rely on retain data or a reference LLM, yet they struggle to adequately balance unlearning performance with overall model utility. This challenge arises because leveraging explicit retain data or implicit knowledge of retain data from a reference LLM to fine-tune the model tends to blur the boundaries between the forgotten and retain data, as different queries often elicit similar responses. In this work, we propose eliminating the need to retain data or the reference LLM for response calibration in LLM unlearning. Recognizing that directly applying gradient ascent on the forget data often leads to optimization instability and poor performance, our method guides the LLM on what not to respond to, and importantly, how to respond, based on the forget data. Hence, we introduce Forget data only Loss AjustmenT (FLAT), a "flat" loss adjustment approach which addresses these issues by maximizing f-divergence between the available template answer and the forget answer only w.r.t. the forget data. The variational form of the defined f-divergence theoretically provides a way of loss adjustment by assigning different importance weights for the learning w.r.t. template responses and the forgetting of responses subject to unlearning. Empirical results demonstrate that our approach not only achieves superior unlearning performance compared to existing methods but also minimizes the impact on the model's retained capabilities, ensuring high utility across diverse tasks, including copyrighted content unlearning on Harry Potter dataset and MUSE Benchmark, and entity unlearning on the TOFU dataset.
Key facts. Cited by 75 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 77 of its 96 references that are in the map. First posted on arXiv 14 Oct 2024.
Builds on
77 of 96 references.
Closest ancestors · 32
Same direction, newest first
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Models20 Sep
- 2024MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts18 Sep
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspective24 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024Soft Prompting for Unlearning in Large Language Models17 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024Label Smoothing Improves Machine Unlearning11 Jun
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning28 Apr
- 2024Offset Unlearning for Large Language Models17 Apr
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Challenging Forgets: Unveiling the Worst-Case Forget Sets in Machine Unlearning12 Mar
20 more
- 2024Guardrail Baselines for Unlearning in LLMs5 Mar
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMs1 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Large Language Model Unlearning14 Oct
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment11 May
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Evaluating Machine Unlearning via Epistemic Uncertainty23 Aug
- 2022Continual Learning and Private Unlearning24 Mar
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
Other references · 45
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2023Mistral 7Bcited by 3,164
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
33 more
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2018Continual Lifelong Learning with Neural Networks: A Reviewcited by 1,330
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 963
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 565
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
- 2016f-GAN: Training Generative Neural Samplers using Variational Divergence Minimizationcited by 506
- 2020Amnesiac Machine Learningcited by 319
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2021Learning with Noisy Labels Revisited: A Study Using Real-World Human Annotationscited by 256
- 2020Approximate Data Deletion from Machine Learning Modelscited by 255
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
- 2019Peer Loss Functions: Learning from Noisy Labels without Knowing Noise Ratescited by 142
- 2024LLM Dataset Inference: Did you train on my dataset?cited by 110
- 2023Copyright Violations and Large Language Modelscited by 108
- 2023Identifying and Mitigating the Security Risks of Generative AIcited by 91
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
- 2021To Smooth or Not? When Label Smoothing Meets Noisy Labelscited by 70
- 2021Clusterability as an Alternative to Anchor Points When Learning with Noisy Labelscited by 65
- 2021Detecting Corrupted Labels Without Training a Model to Predictcited by 58
- 2022PUMA: Performance Unchanged Model Augmentation for Training Data Removalcited by 58
- 2020When Optimizing f-divergence is Robust with Label Noisecited by 44
- 2022The CRINGE Loss: Learning what language not to modelcited by 39
- 2024Measuring and Reducing LLM Hallucination without Gold-Standard Answerscited by 31
- 2022To Aggregate or Not? Learning with Separate Noisy Labelscited by 29
- 2022Beyond Images: Label Noise Transition Matrix Estimation for Tasks with Lower-Quality Featurescited by 27
- 2023Unmasking and Improving Data Credibility: A Study with Datasets for Training Harmless Language Modelscited by 26
- 2024Human-Instruction-Free LLM Self-Alignment with Limited Samplescited by 25
- 2024Automatic Dataset Construction (ADC): Sample Collection, Data Curation, and Beyondcited by 18
- 2024Harnessing Business and Media Insights with Large Language Modelscited by 7
Built on by
Citing papers per year: 2024: 1; 2025: 40; 2026: 34.
75 papers.
Sort:
By area:
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 83
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimalitycited by 16
- 2025A General Framework to Enhance Fine-tuning-based LLM Unlearningcited by 14
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?cited by 13
- 2025SALAD: Systematic Assessment of Machine Unlearning on LLM-Aided Hardware Designcited by 12
- 2025Standardization of Psychiatric Diagnoses -- Role of Fine-tuned LLM Consortium and OpenAI-gpt-oss Reasoning LLM Enabled Decision Support Systemcited by 12
- 2025Unlearning vs. Obfuscation: Are We Truly Removing Knowledge?cited by 11
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Modelscited by 10
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 9
38 more
- 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedycited by 9
- 2025OFFSIDE: Benchmarking Unlearning Misinformation in Multimodal Large Language Modelscited by 8
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearningcited by 8
- 2025Harry Potter is Still Here! Probing Knowledge Leakage in Targeted Unlearned Large Language Models via Automated Adversarial Promptingcited by 7
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026Contrastive Representation Shaping for LLM Unlearningcited by 7
- 2026Explainable LLM Unlearning Through Reasoningcited by 7
- 2025Not All Tokens Are Meant to Be Forgottencited by 6
- 2025Privacy-R1: Privacy-Aware Multi-LLM Agent Collaboration via Reinforcement Learningcited by 6
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shiftingcited by 6
- 2026Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearningcited by 6
- 2025Erasing Without Remembering: Implicit Knowledge Forgetting in Large Language Modelscited by 5
- 2025LLM Unlearning Without an Expert Curated Datasetcited by 5
- 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluationcited by 5
- 2025CE-U: Cross Entropy Unlearningcited by 4
- 2025Unilogit: Robust Machine Unlearning for LLMs Using Uniform-Target Self-Distillationcited by 4
- 2025Large Language Model Unlearning for Source Codecited by 4
- 2025Uncovering the Potential Risks in Unlearning: Danger of English-only Unlearning in Multilingual LLMscited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 4
- 2025Geometric-disentangelment Unlearningcited by 4
- 2026Reinforcement Unlearning via Group Relative Policy Optimizationcited by 4
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loopcited by 4
- 2025Standardization of Neuromuscular Reflex Analysis -- Role of Fine-Tuned Vision-Language Model Consortium and OpenAI gpt-oss Reasoning LLM Enabled Decision Support Systemcited by 3
- 2025Label Smoothing Improves Gradient Ascent in LLM Unlearningcited by 3
- 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Modelscited by 3
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teachercited by 3
- 2026Models Designed to Forget: Machine Unlearning via Key Deletioncited by 3
- 2025Leveraging Machine Unlearning for Cost-Efficient Preference Alignmentcited by 2
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2025GUARD: Guided Unlearning and Retention via Data Attribution for Large Language Modelscited by 2
- 2025Oblivionis: A Lightweight Learning and Unlearning Framework for Federated Large Language Modelscited by 2
- 2025A Unified Framework for Diffusion Model Unlearning with f-Divergencecited by 2
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearningcited by 2
- 2026CALIBURN: Self-Calibrated LLM Unlearning Alignmentcited by 2
- 2026BID-LoRA: A Parameter-Efficient Framework for Continual Learning and Unlearningcited by 2
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibilitycited by 2
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendationcited by 2
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
50 most cited of 75 All 75 (JSON)
- 2026RA2: Retain-Anchored Attraction Preserves Forget-Adjacent Utility in LLM Unlearning14 Oct 2026
- 2026Mitigating Private Data Leakage in LLMs with Whiteout1 Oct 2026
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026UNBIND: UNlearning By INference-time Directional Steering for Code LLMs28 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMs26 Aug 2026
- 2026Distance Is Not Enough: Forget-Retain Alignment Gap Predicts LLM Relearning Robustness26 Aug 2026
- 2026Unlearning Is Not Just Erasing: Temporal Decoupling via Generation Inequality24 Aug 2026
- 2026SAUL: Sharpness-Aware Augmented-Lagrangian Unlearning17 Aug 2026
- 2026The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearning14 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
38 more
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
- 2026SAGE: Retain-Aware Post-Hoc Sanitization of Final Unlearning Vector16 Jun 2026
- 2026Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearning13 Jun 2026
- 2026TRACER: Token ReAssignment for Concept ERasure in Generative Recommendation5 Jun 2026
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibility2 Jun 2026
- 2026Retain-Neutral Surrogates for Min-Max Unlearning7 May 2026
- 2026Harmonizing Multi-Objective LLM Unlearning via Unified Domain Representation and Bidirectional Logit Distillation16 Apr 2026
- 2026BID-LoRA: A Parameter-Efficient Framework for Continual Learning and Unlearning14 Apr 2026
- 2026Models Designed to Forget: Machine Unlearning via Key Deletion16 Mar 2026
- 2026MPU: Towards Secure and Privacy-Preserving Knowledge Unlearning for Large Language Models27 Feb 2026
- 2026Explainable LLM Unlearning Through Reasoning8 Feb 2026
- 2026Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearning6 Feb 2026
- 2026REBEL: Hidden Knowledge Recovery via Evolutionary-Based Evaluation Loop5 Feb 2026
- 2026f-FUM: Federated Unlearning via min--max and f-divergence5 Feb 2026
- 2026CALIBURN: Self-Calibrated LLM Unlearning Alignment2 Feb 2026
- 2026EvoMU: Evolutionary Machine Unlearning2 Feb 2026
- 2026Contrastive Representation Shaping for LLM Unlearning29 Jan 2026
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher29 Jan 2026
- 2026Reinforcement Unlearning via Group Relative Policy Optimization28 Jan 2026
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges19 Jan 2026
- 2026BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning14 Jan 2026
- 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Models10 Jan 2026
- 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation22 Dec 2025
- 2025When Forgetting Builds Reliability: LLM Unlearning for Reliable Hardware Code Generation5 Dec 2025
- 2025Hierarchical Dual-Strategy Unlearning for Biomedical and Healthcare Intelligence Using Imperfect and Privacy-Sensitive Medical Data23 Nov 2025
- 2025Geometric-disentangelment Unlearning21 Nov 2025
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025Standardization of Psychiatric Diagnoses -- Role of Fine-tuned LLM Consortium and OpenAI-gpt-oss Reasoning LLM Enabled Decision Support System29 Oct 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Uncovering the Potential Risks in Unlearning: Danger of English-only Unlearning in Multilingual LLMs28 Oct 2025
- 2025OFFSIDE: Benchmarking Unlearning Misinformation in Multimodal Large Language Models26 Oct 2025
- 2025Label Smoothing Improves Gradient Ascent in LLM Unlearning25 Oct 2025
- 2025LLM Unlearning with LLM Beliefs22 Oct 2025
- 2025Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting20 Oct 2025
- 2025Privacy-R1: Privacy-Aware Multi-LLM Agent Collaboration via Reinforcement Learning16 Oct 2025
- 2025Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning30 Sep 2025
- 2025A Unified Framework for Diffusion Model Unlearning with f-Divergence25 Sep 2025
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization24 Sep 2025
50 newest of 75 All 75 (JSON)
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 83
- 2025Exploring Criteria of Loss Reweighting to Enhance LLM Unlearningcited by 39
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025LLM Unlearning with LLM Beliefscited by 17
- 2025RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimalitycited by 16
- 2025A General Framework to Enhance Fine-tuning-based LLM Unlearningcited by 14
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?cited by 13
- 2025SALAD: Systematic Assessment of Machine Unlearning on LLM-Aided Hardware Designcited by 12
- 2025Unlearning vs. Obfuscation: Are We Truly Removing Knowledge?cited by 11
- 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Modelscited by 10
- 2025Improving LLM Unlearning Robustness via Random Perturbationscited by 9
- 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedycited by 9
12 most cited of 66 All 66 (JSON)
- 2026RA2: Retain-Anchored Attraction Preserves Forget-Adjacent Utility in LLM Unlearning14 Oct 2026
- 2026Mitigating Private Data Leakage in LLMs with Whiteout1 Oct 2026
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026UNBIND: UNlearning By INference-time Directional Steering for Code LLMs28 Sep 2026
- 2026On-the-go Forgetting without Explicit Unlearning via ERASE5 Sep 2026
- 2026Distance Is Not Enough: Forget-Retain Alignment Gap Predicts LLM Relearning Robustness26 Aug 2026
- 2026Unlearning Is Not Just Erasing: Temporal Decoupling via Generation Inequality24 Aug 2026
- 2026SAUL: Sharpness-Aware Augmented-Lagrangian Unlearning17 Aug 2026
- 2026The More Popular, The Harder to Forget: Adaptive Popularity for LLM Unlearning14 Aug 2026
- 2026Beyond Binary Rewards: A Comparative Study of Reward Design for Reinforcement Unlearning30 Jul 2026
- 2026CBD: API-Only LLM Black-Box Unlearning through Controlled Behavioral Divergence26 Jun 2026
12 newest of 66 All 66 (JSON)
- 2025Standardization of Psychiatric Diagnoses -- Role of Fine-tuned LLM Consortium and OpenAI-gpt-oss Reasoning LLM Enabled Decision Support Systemcited by 12
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026Explainable LLM Unlearning Through Reasoningcited by 7
- 2026Explainable LLM Unlearning Through Reasoning8 Feb 2026
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025Standardization of Psychiatric Diagnoses -- Role of Fine-tuned LLM Consortium and OpenAI-gpt-oss Reasoning LLM Enabled Decision Support System29 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2026De-attribute to Forget for LLM Unlearning
- 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
- 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning
- 2025LLM Unlearning using Gradient Ratio-Based Influence Estimation and Noise Injection
- 2025Reveal and Release: Iterative LLM Unlearning with Self-generated Data
- 2024Towards Robust Evaluation of Unlearning in LLMs via Data Transformations
- 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data