Distributional Machine Unlearning via Selective Data Removal
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine learning systems increasingly face requirements to remove entire domains of information--such as toxic language or biases--rather than individual user data. This task presents a dilemma: full removal of the unwanted domain data is computationally expensive, while random partial removal is statistically inefficient. We find that a domain's statistical influence is often concentrated in a small subset of its data samples, suggesting a path between ineffective partial removal and unnecessary complete removal. We formalize this as distributional unlearning: a framework to select a small subset that balances forgetting an unwanted distribution while preserving a desired one. Using Kullback-Leibler divergence constraints, we derive the exact removal-preservation Pareto frontier for Gaussian distributions and prove that models trained on the edited data achieve corresponding log-loss bounds. We propose a distance-based selection algorithm and show it is quadratically more sample-efficient than random removal in the challenging low-divergence regime. Experiments across synthetic, text, and image datasets (Jigsaw, CIFAR-10, SMS spam) show our method requires 15-82% less deletion than full removal for strong unlearning effects, e.g., halving initial forget set accuracy. Ultimately, by showing a small forget set often suffices, our framework lays the foundations for more scalable and rigorous subpopulation unlearning.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 31 of its 40 references that are in the map. First posted on arXiv 20 Jul 2025.
Builds on
31 of 40 references.
Closest ancestors · 11
Same direction, newest first
- 2025Certified Unlearning for Neural Networks8 Jun
- 2025When to Forget? Complexity Trade-offs in Machine Unlearning24 Feb
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
- 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
- 2021Fast Yet Effective Machine Unlearning17 Nov
Other references · 20
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2019Machine Unlearningcited by 1,061
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 455
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 439
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2023From Quantity to Quality: Boosting LLM Performance with Self-Guided Data Selection for Instruction Tuningcited by 307
- 2021GRAD-MATCH: Gradient Matching based Data Subset Selection for Efficient Deep Model Trainingcited by 274
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2020Approximate Data Deletion from Machine Learning Modelscited by 255
- 2018Adversarial Removal of Demographic Attributes from Text Datacited by 170
8 more
- 2017Autoencoding Variational Inference For Topic Modelscited by 169
- 2022Coverage-centric Coreset Selection for High Pruning Ratescited by 117
- 2024A Survey on Data Selection for LLM Instruction Tuningcited by 77
- 2023One-Shot Learning as Instruction Data Prospector for Large Language Modelscited by 43
- 2023Spanning Training Progress: Temporal Dual-Depth Scoring (TDDS) for Enhanced Dataset Pruningcited by 38
- 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 21
- 2025Data Whisperer: Efficient Data Selection for Task-Specific LLM Fine-Tuning via Few-Shot In-Context Learningcited by 20
- 2022Fast Rates in Pool-Based Batch Active Learningcited by 15
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approachcited by 1
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026What to Forget in Unlearning? Forget Set Curation for Language Modelscited by 0
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearningcited by 0
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spacescited by 0
- 2026Learning What to Forget: Distributional Unlearning for LLM Representation Spaces30 Sep 2026
- 2026Bounding Retraining Equivalence and the Deletion Floor in Materials Machine Unlearning28 Sep 2026
- 2026What to Forget in Unlearning? Forget Set Curation for Language Models14 Aug 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
Similar, not cited
Close in wording, no citation either way
- 2022Algorithms that Approximate Data Removal: New Results and Limitations
- 2025Certified Data Removal Under High-dimensional Settings
- 2024nabla τ: Gradient-based and Task-Agnostic machine Unlearning
- 2025Towards Source-Free Machine Unlearning
- 2022An Introduction to Machine Unlearning
- 2026Efficient machine unlearning with minimax optimality
- 2024An Information Theoretic Approach to Machine Unlearning
- 2026TILDE: TILt-based Distributional Erasure for Concept Unlearning