Preserving Privacy Without Compromising Accuracy: Machine Unlearning for Handwritten Text Recognition
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Handwritten Text Recognition (HTR) is crucial for document digitization, but handwritten data can contain user-identifiable features, like unique writing styles, posing privacy risks. Regulations such as the ``right to be forgotten'' require models to remove these sensitive traces without full retraining. We introduce a practical encoder-only transformer baseline as a robust reference for future HTR research. Building on this, we propose a two-stage unlearning framework for multihead transformer HTR models. Our method combines neural pruning with machine unlearning applied to a writer classification head, ensuring sensitive information is removed while preserving the recognition head. We also present Writer-ID Confusion (WIC), a method that forces the forget set to follow a uniform distribution over writer identities, unlearning user-specific cues while maintaining text recognition performance. We compare WIC to Random Labeling, Fisher Forgetting, Amnesiac Unlearning, and DELETE within our prune-unlearn pipeline and consistently achieve better privacy and accuracy trade-offs. This is the first systematic study of machine unlearning for HTR. Using metrics such as Accuracy, Character Error Rate (CER), Word Error Rate (WER), and Membership Inference Attacks (MIA) on the IAM and CVL datasets, we demonstrate that our method achieves state-of-the-art or superior performance for effective unlearning. These experiments show that our approach effectively safeguards privacy without compromising accuracy, opening new directions for document analysis research. Our code is publicly available at https://github.com/leitro/WIC-WriterIDConfusion-MachineUnlearning.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 27 of its 39 references that are in the map. First posted on arXiv 11 Apr 2025.
Builds on
27 of 39 references.
Closest ancestors · 6
Same direction, newest first
- 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks31 Mar
- 2024Machine Unlearning for Document Classification29 Apr
- 2023Fast Model Debias with Machine Unlearning19 Oct
- 2023Model Sparsity Can Simplify Machine Unlearning11 Apr
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
Other references · 21
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2019Machine Unlearningcited by 1,061
- 2021Membership Inference Attacks From First Principlescited by 878
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2020Amnesiac Machine Learningcited by 319
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 285
- 2021TrOCR: Transformer-based Optical Character Recognition with Pre-trained Modelscited by 279
- 2021DocFormer: End-to-End Transformer for Document Understandingcited by 256
- 2018Privacy Preserving Machine Learning: Threats and Solutionscited by 79
9 more
- 2020Pay Attention to What You Read: Non-recurrent Handwritten Text-Line Recognitioncited by 71
- 2023DTrOCR: Decoder-only Transformer for Optical Character Recognitioncited by 40
- 2024HTR-VT: Handwritten Text Recognition with Vision Transformercited by 24
- 2019Fast Multi-language LSTM-based Online Handwriting Recognitioncited by 22
- 2021ICDAR 2021 Competition on Document VisualQuestion Answeringcited by 19
- 2019Candidate Fusion: Integrating Language Modelling into a Sequence-to-Sequence Handwritten Word Recognition Architecturecited by 12
- 2019Fully Convolutional Networks for Handwriting Recognitioncited by 10
- 2024Multi-Page Document Visual Question Answering using Self-Attention Scoring Mechanismcited by 8
- 2025Privacy-Preserving Biometric Verification with Handwritten Random Digit Stringcited by 4
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2024A Comparative Study of Machine Unlearning Techniques for Image and Text Classification Models
- 2025Advancing Offline Handwritten Text Recognition: A Systematic Review of Data Augmentation and Generation Techniques
- 2024Textual Unlearning Gives a False Sense of Unlearning
- 2024Machine unlearning through fine-grained model parameters perturbation
- 2024Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbation
- 2026Shadow Unlearning: A Neuro-Semantic Approach to Fidelity-Preserving Faceless Forgetting in LLMs
- 2024Gone but Not Forgotten: Improved Benchmarks for Machine Unlearning
- 2023Machine Unlearning: Solutions and Challenges