mlsanityData to 7 Oct 2026

Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach

arXiv 2510.13094 ↗First posted 15 Oct 2025stat.ML cs.LGcited by 5

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine unlearning seeks to efficiently remove the influence of selected data while preserving generalization. Significant progress has been made in low dimensions (p ll n), but high dimensions pose serious theoretical challenges as standard optimization assumptions of Omega(1) strong convexity and O(1) smoothness of the per-example loss f rarely hold simultaneously in proportional regimes (p~ n). In this work, we introduce varepsilon-Gaussian certifiability, a canonical and robust notion well-suited to high-dimensional regimes, that optimally captures a broad class of noise adding mechanisms. Then we theoretically analyze the performance of a widely used unlearning algorithm based on one step of the Newton method in the high-dimensional setting described above. Our analysis shows that a single Newton step, followed by a well-calibrated Gaussian noise, is sufficient to achieve both privacy and accuracy in this setting. This result stands in sharp contrast to the only prior work that analyzes machine unlearning in high dimensions citetzou2025certified, which relaxes some of the standard optimization assumptions for high-dimensional applicability, but operates under the notion of varepsilon-certifiability. That work concludes %that a single Newton step is insufficient even for removing a single data point, and that at least two steps are required to ensure both privacy and accuracy. Our result leads us to conclude that the discrepancy in the number of steps arises because of the sub optimality of the notion of varepsilon-certifiability and its incompatibility with noise adding mechanisms, which varepsilon-Gaussian certifiability is able to overcome optimally.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 28 of its 47 references that are in the map. First posted on arXiv 15 Oct 2025.

Builds on

28 of 47 references.

Closest ancestors · 15

Same direction, newest first

  1. 2025Certified Data Removal Under High-dimensional Settings12 May
  2. 2025Exact Unlearning of Finetuning Data via Model Merging at Scale6 Apr
  3. 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
  4. 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun
  5. 2024Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning24 Jun
  6. 2024On Newton's Method to Unlearn Neural Networks20 Jun
  7. 2024Machine Unlearning: A Comprehensive Survey13 May
  8. 2024Rethinking Machine Unlearning for Large Language Models13 Feb
  9. 2022A Survey of Machine Unlearning6 Sep
  10. 2022Zero-Shot Machine Unlearning14 Jan
  11. 2021Fast Yet Effective Machine Unlearning17 Nov
  12. 2021Machine Unlearning of Features and Labels26 Aug
3 more
  1. 2021Adaptive Machine Unlearning8 Jun
  2. 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
  3. 2021Machine Unlearning via Algorithmic Stability25 Feb

Other references · 13

  1. 2021Convex optimizationcited by 2,479
  2. 2019Machine Unlearningcited by 1,020
  3. 2019Certified Data Removal from Machine Learning Modelscited by 512
  4. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  5. 2013The Composition Theorem for Differential Privacycited by 290
  6. 2020When Machine Unlearning Jeopardizes Privacycited by 181
  7. 2019Deep Learning with Gaussian Differential Privacycited by 112
  8. 2019Hypothesis Testing Interpretations and Renyi Differential Privacycited by 84
  9. 2021Canonical Noise Distributions and Private Hypothesis Testscited by 8
  10. 2021A Central Limit Theorem for Differentially Private Query Answeringcited by 7
  11. 2022Log-Concave and Multivariate Canonical Noise Distributions for Differential Privacycited by 5
  12. 2023Corrected generalized cross-validation for finite ensembles of penalized estimatorscited by 5
1 more
  1. 2024Theoretical Analysis of Leave-one-out Cross Validation for Non-differentiable Penalties under High-dimensional Settingscited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.