mlsanityData to 14 Oct 2026

ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Data

arXiv 2504.14452 ↗First posted 20 Apr 2025cs.CL cs.AI cs.LGcited by 6

On the map: LLM alignment / RLHF / preference optimisation → LLM preference optimization methods

Abstract (arXiv)

Language models (LMs) can memorize and reproduce segments from their pretraining data verbatim even in non-adversarial settings, raising concerns about copyright, plagiarism, privacy, and creativity. We introduce Paraphrase Preference Optimization (ParaPO), a post-training method that fine-tunes LMs to reduce unintentional regurgitation while preserving their overall utility. ParaPO trains LMs to prefer paraphrased versions of memorized segments over the original verbatim content from the pretraining data. To maintain the ability to recall famous quotations when appropriate, we develop a variant of ParaPO that uses system prompts to control regurgitation behavior. In our evaluation on Llama3.1-8B, ParaPO consistently reduces regurgitation across all tested datasets (e.g., reducing the regurgitation metric from 17.3 to 12.9 in creative writing), whereas unlearning methods used in prior work to mitigate regurgitation are less effective outside their targeted unlearned domain (from 17.3 to 16.9). When applied to the instruction-tuned Tulu3-8B model, ParaPO with system prompting successfully preserves famous quotation recall while reducing unintentional regurgitation (from 8.7 to 6.3 in creative writing) when prompted not to regurgitate. In contrast, without ParaPO tuning, prompting the model not to regurgitate produces only a marginal reduction (8.7 to 8.4).

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in LLM preference optimization methods, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 50 references that are in the map. First posted on arXiv 20 Apr 2025.

Builds on

40 of 50 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr

Other references · 39

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  2. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  4. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  5. 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
  6. 2020Extracting Training Data from Large Language Modelscited by 2,189
  7. 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
  8. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  9. 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 897
  10. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
  11. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  12. 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 483
27 more
  1. 2023Evaluating Large Language Models at Evaluating Instruction Followingcited by 302
  2. 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
  3. 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 195
  4. 2024Infini-gram: Scaling Unbounded n-gram Language Models to a Trillion Tokenscited by 153
  5. 2023Emergent and Predictable Memorization in Large Language Modelscited by 148
  6. 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 123
  7. 2024On Memorization of Large Language Models in Logical Reasoningcited by 117
  8. 2023Foundation Models and Fair Usecited by 116
  9. 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 105
  10. 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contextscited by 94
  11. 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Datacited by 85
  12. 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
  13. 2022Do Language Models Plagiarize?cited by 73
  14. 2023SILO Language Models: Isolating Legal Risk In a Nonparametric Datastorecited by 71
  15. 2024Demystifying Verbatim Memorization in Large Language Modelscited by 56
  16. 2024Be like a Goldfish, Don't Memorize! Mitigating Memorization in Generative LLMscited by 50
  17. 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
  18. 2024AI as Humanity's Salieri: Quantifying Linguistic Creativity of Language Models via Systematic Attribution of Machine Text against Web Textcited by 42
  19. 2024Elephants Never Forget: Memorization and Learning of Tabular Data in Large Language Modelscited by 36
  20. 2024CopyBench: Measuring Literal and Non-Literal Reproduction of Copyright-Protected Text in Language Model Generationcited by 35
  21. 2024SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generationcited by 34
  22. 2023Safer-Instruct: Aligning Language Models with Automated Preference Datacited by 27
  23. 2024Evaluating n-Gram Novelty of Language Models Using Rusty-DAWGcited by 25
  24. 2024Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuningcited by 24
  25. 2024Measuring Non-Adversarial Reproduction of Training Data in Large Language Modelscited by 14
  26. 2025Proactive Privacy Amnesia for Large Language Models: Safeguarding PII with Negligible Impact on Model Utilitycited by 10
  27. 2025Mitigating Memorization in LLMs using Activation Steeringcited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 4.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Enhancing Paraphrase Type Generation: The Impact of DPO and RLHF Evaluated with Human-Ranked Data
  2. 2024Self-Boosting Large Language Models with Synthetic Preference Data
  3. 2026An Empirical Study of SFT-DPO Interaction and Parameterization in Small Language Models
  4. 2025The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation
  5. 2025A Lightweight Method to Disrupt Memorized Sequences in LLM
  6. 2024Many-Shot Regurgitation (MSR) Prompting
  7. 2025InfoPO: On Mutual Information Maximization for Large Language Model Alignment
  8. 2025SUV: Scalable Large Language Model Copyright Compliance with Regularized Selective Unlearning