Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speech
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
The rapid advancement of Zero-Shot Text-to-Speech (ZS-TTS) technology has enabled high-fidelity voice synthesis from minimal audio cues, raising significant privacy and ethical concerns. Despite the threats to voice privacy, research to selectively remove the knowledge to replicate unwanted individual voices from pre-trained model parameters has not been explored. In this paper, we address the new challenge of speaker identity unlearning for ZS-TTS systems. To meet this goal, we propose the first machine unlearning frameworks for ZS-TTS, especially Teacher-Guided Unlearning (TGU), designed to ensure the model forgets designated speaker identities while retaining its ability to generate accurate speech for other speakers. Our proposed methods incorporate randomness to prevent consistent replication of forget speakers' voices, assuring unlearned identities remain untraceable. Additionally, we propose a new evaluation metric, speaker-Zero Retrain Forgetting (spk-ZRF). This assesses the model's ability to disregard prompts associated with forgotten speakers, effectively neutralizing its knowledge of these voices. The experiments conducted on the state-of-the-art model demonstrate that TGU prevents the model from replicating forget speakers' voices while maintaining high quality for other speakers. The demo is available at https://speechunlearn.github.io/
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 42 of its 56 references that are in the map. First posted on arXiv 27 Jul 2025.
Builds on
42 of 56 references.
Closest ancestors · 11
Same direction, newest first
- 2024Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Approximate Unlearning Completeness19 Mar
- 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Machine Unlearning: Solutions and Challenges14 Aug
- 2023Boundary Unlearning21 Mar
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Evaluating Machine Unlearning via Epistemic Uncertainty23 Aug
- 2022Quark: Controllable Text Generation with Reinforced Unlearning26 May
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearning27 Sep
- 2021Machine Unlearning of Features and Labels26 Aug
Other references · 31
- 2017Attention Is All You Needcited by 59,932
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2022Flow Matching for Generative Modelingcited by 5,426
- 2020wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representationscited by 3,853
- 2021HuBERT: Self-Supervised Speech Representation Learning by Masked Prediction of Hidden Unitscited by 2,301
- 2021WavLM: Large-Scale Self-Supervised Pre-Training for Full Stack Speech Processingcited by 1,609
- 2020HiFi-GAN: Generative Adversarial Networks for Efficient and High Fidelity Speech Synthesiscited by 1,139
- 2021Train Short, Test Long: Attention with Linear Biases Enables Input Length Extrapolationcited by 1,085
- 2023Neural Codec Language Models are Zero-Shot Text to Speech Synthesizerscited by 737
- 2022High Fidelity Neural Audio Compressioncited by 673
- 2019LibriTTS: A Corpus Derived from LibriSpeech for Text-to-Speechcited by 639
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
19 more
- 2023Erasing Concepts from Diffusion Modelscited by 530
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2019Libri-Light: A Benchmark for ASR with Limited or No Supervisioncited by 462
- 2023Voicebox: Text-Guided Multilingual Universal Speech Generation at Scalecited by 373
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 297
- 2021YourTTS: Towards Zero-Shot Multi-Speaker TTS and Zero-Shot Voice Conversion for everyonecited by 277
- 2023NaturalSpeech 2: Latent Diffusion Models are Natural and Zero-Shot Speech and Singing Synthesizerscited by 233
- 2024NaturalSpeech 3: Zero-Shot Speech Synthesis with Factorized Codec and Diffusion Modelscited by 222
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 204
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2021Graph Unlearningcited by 129
- 2020Machine Unlearning for Random Forestscited by 125
- 2023Libriheavy: a 50,000 hours ASR corpus with punctuation casing and contextcited by 84
- 2021The VoicePrivacy 2020 Challenge: Results and findingscited by 45
- 2024The VoicePrivacy 2024 Challenge Evaluation Plancited by 39
- 2024Generative Unlearning for Any Identitycited by 19
- 2024Incremental Learning of Retrievable Skills For Efficient Continual Task Adaptationcited by 19
- 2019The GDPR & Speech Data: Reflections of Legal and Technology Communities, First Steps towards a Common Understandingcited by 18
- 2024The VoicePrivacy 2022 Challenge: Progress and Perspectives in Voice Anonymisationcited by 17
Built on by
Citing papers per year: 2025: 1; 2026: 5.
6 papers.
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarkscited by 6
- 2025No Encore: Unlearning as Opt-Out in Music Generationcited by 1
- 2026Continual Speaker Identity Unlearning with Minimal Interferencecited by 1
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speechcited by 0
- 2026Forget who you Forgot: Speaker Unlearning to Prevent Re-Identification in Zero-Shot Text-to-Speechcited by 0
- 2026Evaluating Machine Unlearning in ASRcited by 0
- 2026Evaluating Machine Unlearning in ASR28 Sep 2026
- 2026Forget who you Forgot: Speaker Unlearning to Prevent Re-Identification in Zero-Shot Text-to-Speech23 Sep 2026
- 2026Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks8 Jul 2026
- 2026Continual Speaker Identity Unlearning with Minimal Interference25 May 2026
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speech8 Mar 2026
- 2025No Encore: Unlearning as Opt-Out in Music Generation8 Sep 2025