Fundamental Limits of Perfect Concept Erasure
Not on the map. Why?
Abstract (arXiv)
Concept erasure is the task of erasing information about a concept (e.g., gender or race) from a representation set while retaining the maximum possible utility -- information from original representations. Concept erasure is useful in several applications, such as removing sensitive concepts to achieve fairness and interpreting the impact of specific concepts on a model's performance. Previous concept erasure techniques have prioritized robustly erasing concepts over retaining the utility of the resultant representations. However, there seems to be an inherent tradeoff between erasure and retaining utility, making it unclear how to achieve perfect concept erasure while maintaining high utility. In this paper, we offer a fresh perspective toward solving this problem by quantifying the fundamental limits of concept erasure through an information-theoretic lens. Using these results, we investigate constraints on the data distribution and the erasure functions required to achieve the limits of perfect concept erasure. Empirically, we show that the derived erasure functions achieve the optimal theoretical bounds. Additionally, we show that our approach outperforms existing methods on a range of synthetic and real-world datasets using GPT-4 representations.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 46 of its 86 references that are in the map. First posted on arXiv 25 Mar 2025.
Builds on
46 of 86 references.
References · 46
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2023GPT-4 Technical Reportcited by 18,396
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,348
- 2022Large Language Models Encode Clinical Knowledgecited by 1,830
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2018A Tutorial on Bayesian Optimizationcited by 744
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 455
34 more
- 2018Learning Adversarially Fair and Transferable Representationscited by 353
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2018Formal Limitations on the Measurement of Mutual Informationcited by 189
- 2018Adversarial Removal of Demographic Attributes from Text Datacited by 170
- 2020A Theory of Usable Information Under Computational Constraintscited by 162
- 2019Understanding the Limitations of Variational Mutual Information Estimatorscited by 140
- 2017Controllable Invariance through Adversarial Feature Learningcited by 127
- 2017A Tutorial on Kernel Density Estimation and Recent Advancescited by 101
- 2022Linear Adversarial Concept Erasurecited by 101
- 2021Domain Invariant Representation Learning with Domain Density Transformationscited by 53
- 2023A Short Survey of Viewing Large Language Models in Legal Aspectcited by 52
- 2022Kernelized Concept Erasurecited by 48
- 2020OSCaR: Orthogonal Subspace Correction and Rectification of Biases in Word Embeddingscited by 40
- 2020Fundamental Limits and Tradeoffs in Invariant Representation Learningcited by 38
- 2022Gold Doesn't Always Glitter: Spectral Removal of Linear and Nonlinear Guarded Attribute Informationcited by 34
- 2020It's not Greek to mBERT: Inducing Word-Level Translations from Multilingual BERTcited by 30
- 2023Learning Interpretable Style Embeddings via Prompting LLMscited by 30
- 2016Entropic Causal Inferencecited by 27
- 2021A Stochastic Optimization Framework for Fair Risk Minimizationcited by 26
- 2022Better Hit the Nail on the Head than Beat around the Bush: Removing Protected Attributes with a Single Projectioncited by 17
- 2022Learning Fair Representations via Rate-Distortion Maximizationcited by 15
- 2021Adversarial Scrubbing of Demographic Information for Text Classificationcited by 14
- 2021On Characterizing the Trade-off in Invariant Representation Learningcited by 12
- 2022Bottlenecks CLUB: Unifying Information-Theoretic Trade-offs Among Complexity, Leakage, and Utilitycited by 12
- 2023Robust Concept Erasure via Kernelized Rate-Distortion Maximizationcited by 11
- 2023Minimum-Entropy Coupling Approximation Guarantees Beyond the Majorization Barriercited by 7
- 2017Entropic Causality and Greedy Minimum Entropy Couplingcited by 6
- 2020On Perfect Obfuscation: Local Information Geometry Analysiscited by 6
- 2021Variational Leakage: The Role of Information Complexity in Privacy Leakagecited by 6
- 2023Zero-Shot Multi-Label Topic Inference with Sentence Encoderscited by 6
- 2018Generalizing Bottleneck Problemscited by 5
- 2017Privacy with Estimation Guaranteescited by 4
- 2024Deep Variational Privacy Funnel: General Modeling with Applications in Face Recognitioncited by 3
- 2024An Efficient Difference-of-Convex Solver for Privacy Funnelcited by 2
Built on by
Citing papers per year: 2025: 1; 2026: 5.
6 papers.
- 2025The Blessing and Curse of Dimensionality in Safety Alignmentcited by 10
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoorscited by 3
- 2026Learning from Totally Unpaired Data via Minimum Conditional Entropy Couplingcited by 0
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventionscited by 0
- 2026Kernelized Activation Steeringcited by 0
- 2026Intent-Hiding Jailbreaks: An Information-Theoretic Framework for Compositional Attackscited by 0
- 2026Intent-Hiding Jailbreaks: An Information-Theoretic Framework for Compositional Attacks1 Oct 2026
- 2026Kernelized Activation Steering1 Oct 2026
- 2026MUtE: A Dual Framework for Concept Erasure and Counterfactual Interventions10 Sep 2026
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoors29 Jun 2026
- 2026Learning from Totally Unpaired Data via Minimum Conditional Entropy Coupling15 May 2026
- 2025The Blessing and Curse of Dimensionality in Safety Alignment27 Jul 2025