Simultaneous Unlearning of Multiple Protected User Attributes From Variational Autoencoder Recommenders Using Adversarial Training
On the map: LLM safety and security → Membership inference attacks
Abstract (arXiv)
In widely used neural network-based collaborative filtering models, users' history logs are encoded into latent embeddings that represent the users' preferences. In this setting, the models are capable of mapping users' protected attributes (e.g., gender or ethnicity) from these user embeddings even without explicit access to them, resulting in models that may treat specific demographic user groups unfairly and raise privacy issues. While prior work has approached the removal of a single protected attribute of a user at a time, multiple attributes might come into play in real-world scenarios. In the work at hand, we present AdvXMultVAE which aims to unlearn multiple protected attributes (exemplified by gender and age) simultaneously to improve fairness across demographic user groups. For this purpose, we couple a variational autoencoder (VAE) architecture with adversarial training (AdvMultVAE) to support simultaneous removal of the users' protected attributes with continuous and/or categorical values. Our experiments on two datasets, LFM-2b-100k and Ml-1m, from the music and movie domains, respectively, show that our approach can yield better results than its singular removal counterparts (based on AdvMultVAE) in effectively mitigating demographic biases whilst improving the anonymity of latent embeddings.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 10 of its 20 references that are in the map. First posted on arXiv 28 Oct 2024.
Builds on
10 of 20 references.
Closest ancestors · 2
Same direction, newest first
- 2022Debiasing Learning for Membership Inference Attacks Against Recommender Systems24 Jun
- 2022Unlearning Protected User Attributes in Recommendations with Adversarial Training9 Jun
Other references · 8
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
- 2018Variational Autoencoders for Collaborative Filteringcited by 308
- 2022A Survey on the Fairness of Recommender Systemscited by 102
- 2021Personalized Counterfactual Fairness in Recommendationcited by 38
- 2023Parameter-efficient Modularised Bias Mitigation via AdapterFusioncited by 25
- 2022Trustworthy Recommender Systemscited by 21
- 2018Privacy in Social Media: Identification, Mitigation and Applicationscited by 18
- 2022Modular and On-demand Bias Mitigation with Attribute-Removal Subnetworkscited by 18
Built on by
Citing papers per year: 2024: 1; 2025: 2.
3 papers.
- 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questionscited by 7
- 2025RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systemscited by 1
- 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systemscited by 0
- 2025LEGO: A Lightweight and Efficient Multiple-Attribute Unlearning Framework for Recommender Systems23 Oct 2025
- 2025RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systems15 Apr 2025
- 2024A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions17 Dec 2024