Efficient Unlearning with Privacy Guarantees
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Privacy protection laws, such as the GDPR, grant individuals the right to request the forgetting of their personal data not only from databases but also from machine learning (ML) models trained on them. Machine unlearning has emerged as a practical means to facilitate model forgetting of data instances seen during training. Although some existing machine unlearning methods guarantee exact forgetting, they are typically costly in computational terms. On the other hand, more affordable methods do not offer forgetting guarantees and are applicable only to specific ML models. In this paper, we present efficient unlearning with privacy guarantees (EUPG), a novel machine unlearning framework that offers formal privacy guarantees to individuals whose data are being unlearned. EUPG involves pre-training ML models on data protected using privacy models, and it enables em efficient unlearning with the privacy guarantees offered by the privacy models in use. Through empirical evaluation on four heterogeneous data sets protected with k-anonymity and ε-differential privacy as privacy models, our approach demonstrates utility and forgetting effectiveness comparable to those of exact unlearning methods, while significantly reducing computational and storage costs. Our code is available at https://github.com/najeebjebreel/EUPG.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 45 of its 75 references that are in the map. First posted on arXiv 7 Jul 2025.
Builds on
45 of 75 references.
Closest ancestors · 17
Same direction, newest first
- 2025Certified Unlearning for Neural Networks8 Jun
- 2024Rewind-to-Delete: Certified Machine Unlearning for Nonconvex Functions15 Sep
- 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
- 2024Digital Forgetting in Large Language Models: A Survey of Unlearning Methods2 Apr
- 2024Hessian-Free Online Certified Unlearning2 Apr
- 2024Certified Machine Unlearning via Noisy Stochastic Gradient Descent25 Mar
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2022Algorithms that Approximate Data Removal: New Results and Limitations25 Sep
- 2022A Survey of Machine Unlearning6 Sep
5 more
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Machine Unlearning of Features and Labels26 Aug
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
- 2021Machine Unlearning via Algorithmic Stability25 Feb
Other references · 28
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,120
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Machine Unlearningcited by 1,020
- 2021Membership Inference Attacks From First Principlescited by 839
- 2020Inverting Gradients -- How easy is it to break privacy in federated learning?cited by 707
- 2019TabNet: Attentive Interpretable Tabular Learningcited by 640
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
16 more
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 188
- 2020Mixed-Privacy Forgetting in Deep Networkscited by 158
- 2022Reconstructing Training Data with Informed Adversariescited by 143
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 137
- 2021Graph Unlearningcited by 129
- 2020Machine Unlearning for Random Forestscited by 125
- 2023Low-Cost High-Power Membership Inference Attackscited by 99
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
- 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 67
- 2022Reconstructing Training Data from Model Gradient, Provablycited by 27
- 2022Attacks on Deidentification's Defensescited by 10
- 2022Semi-Leak: Membership Inference Attacks Against Semi-supervised Learningcited by 10
- 2015Utility-Preserving Differentially Private Data Releases Via Individual Ranking Microaggregationcited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.