ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Data
On the map: LLM alignment / RLHF / preference optimisation → LLM preference optimization methods
Abstract (arXiv)
Language models (LMs) can memorize and reproduce segments from their pretraining data verbatim even in non-adversarial settings, raising concerns about copyright, plagiarism, privacy, and creativity. We introduce Paraphrase Preference Optimization (ParaPO), a post-training method that fine-tunes LMs to reduce unintentional regurgitation while preserving their overall utility. ParaPO trains LMs to prefer paraphrased versions of memorized segments over the original verbatim content from the pretraining data. To maintain the ability to recall famous quotations when appropriate, we develop a variant of ParaPO that uses system prompts to control regurgitation behavior. In our evaluation on Llama3.1-8B, ParaPO consistently reduces regurgitation across all tested datasets (e.g., reducing the regurgitation metric from 17.3 to 12.9 in creative writing), whereas unlearning methods used in prior work to mitigate regurgitation are less effective outside their targeted unlearned domain (from 17.3 to 16.9). When applied to the instruction-tuned Tulu3-8B model, ParaPO with system prompting successfully preserves famous quotation recall while reducing unintentional regurgitation (from 8.7 to 6.3 in creative writing) when prompted not to regurgitate. In contrast, without ParaPO tuning, prompting the model not to regurgitate produces only a marginal reduction (8.7 to 8.4).
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in LLM preference optimization methods, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 50 references that are in the map. First posted on arXiv 20 Apr 2025.
Builds on
40 of 50 references.
Closest ancestors · 1
Same direction, newest first
Other references · 39
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 897
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 483
27 more
- 2023Evaluating Large Language Models at Evaluating Instruction Followingcited by 302
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
- 2024Infini-gram: Scaling Unbounded n-gram Language Models to a Trillion Tokenscited by 153
- 2023Emergent and Predictable Memorization in Large Language Modelscited by 148
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 123
- 2024On Memorization of Large Language Models in Logical Reasoningcited by 117
- 2023Foundation Models and Fair Usecited by 116
- 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 105
- 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contextscited by 94
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 85
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
- 2022Do Language Models Plagiarize?cited by 73
- 2023SILO Language Models: Isolating Legal Risk In a Nonparametric Datastorecited by 71
- 2024Demystifying Verbatim Memorization in Large Language Modelscited by 56
- 2024Be like a Goldfish, Don't Memorize! Mitigating Memorization in Generative LLMscited by 50
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
- 2024AI as Humanity's Salieri: Quantifying Linguistic Creativity of Language Models via Systematic Attribution of Machine Text against Web Textcited by 42
- 2024Elephants Never Forget: Memorization and Learning of Tabular Data in Large Language Modelscited by 36
- 2024CopyBench: Measuring Literal and Non-Literal Reproduction of Copyright-Protected Text in Language Model Generationcited by 35
- 2024SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generationcited by 34
- 2023Safer-Instruct: Aligning Language Models with Automated Preference Datacited by 27
- 2024Evaluating n-Gram Novelty of Language Models Using Rusty-DAWGcited by 25
- 2024Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuningcited by 24
- 2024Measuring Non-Adversarial Reproduction of Training Data in Large Language Modelscited by 14
- 2025Proactive Privacy Amnesia for Large Language Models: Safeguarding PII with Negligible Impact on Model Utilitycited by 10
- 2025Mitigating Memorization in LLMs using Activation Steeringcited by 8
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigationcited by 10
- 2025Readers Prefer Outputs of AI Trained on Copyrighted Books over Expert Human Writerscited by 8
- 2026GhazalBench: Canonical Verse Access in LLMs across Persian Ghazals and Shakespearean Sonnetscited by 1
- 2026Beyond Indistinguishability: Measuring Extraction Risk in LLM APIscited by 1
- 2026Output Vector Editing for Memorization Mitigation in Large Language Modelscited by 0
- 2026CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMscited by 0
- 2026CopyShield: A Cross-Level Benchmark of Copyright Defenses in LLMs1 Sep 2026
- 2026Output Vector Editing for Memorization Mitigation in Large Language Models17 Jun 2026
- 2026Beyond Indistinguishability: Measuring Extraction Risk in LLM APIs20 Apr 2026
- 2026GhazalBench: Canonical Verse Access in LLMs across Persian Ghazals and Shakespearean Sonnets6 Feb 2026
- 2025Readers Prefer Outputs of AI Trained on Copyrighted Books over Expert Human Writers15 Oct 2025
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation8 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2025Enhancing Paraphrase Type Generation: The Impact of DPO and RLHF Evaluated with Human-Ranked Data
- 2024Self-Boosting Large Language Models with Synthetic Preference Data
- 2026An Empirical Study of SFT-DPO Interaction and Parameterization in Small Language Models
- 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation
- 2025A Lightweight Method to Disrupt Memorized Sequences in LLM
- 2024Many-Shot Regurgitation (MSR) Prompting
- 2025InfoPO: On Mutual Information Maximization for Large Language Model Alignment
- 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning