Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning seeks to efficiently remove the influence of selected data while preserving generalization. Significant progress has been made in low dimensions (p ll n), but high dimensions pose serious theoretical challenges as standard optimization assumptions of Omega(1) strong convexity and O(1) smoothness of the per-example loss f rarely hold simultaneously in proportional regimes (p~ n). In this work, we introduce varepsilon-Gaussian certifiability, a canonical and robust notion well-suited to high-dimensional regimes, that optimally captures a broad class of noise adding mechanisms. Then we theoretically analyze the performance of a widely used unlearning algorithm based on one step of the Newton method in the high-dimensional setting described above. Our analysis shows that a single Newton step, followed by a well-calibrated Gaussian noise, is sufficient to achieve both privacy and accuracy in this setting. This result stands in sharp contrast to the only prior work that analyzes machine unlearning in high dimensions citetzou2025certified, which relaxes some of the standard optimization assumptions for high-dimensional applicability, but operates under the notion of varepsilon-certifiability. That work concludes %that a single Newton step is insufficient even for removing a single data point, and that at least two steps are required to ensure both privacy and accuracy. Our result leads us to conclude that the discrepancy in the number of steps arises because of the sub optimality of the notion of varepsilon-certifiability and its incompatibility with noise adding mechanisms, which varepsilon-Gaussian certifiability is able to overcome optimally.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 28 of its 47 references that are in the map. First posted on arXiv 15 Oct 2025.
Builds on
28 of 47 references.
Closest ancestors · 15
Same direction, newest first
- 2025Certified Data Removal Under High-dimensional Settings12 May
- 2025Exact Unlearning of Finetuning Data via Model Merging at Scale6 Apr
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
- 2024Machine Unlearning Fails to Remove Data Poisoning Attacks25 Jun
- 2024Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning24 Jun
- 2024On Newton's Method to Unlearn Neural Networks20 Jun
- 2024Machine Unlearning: A Comprehensive Survey13 May
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2022A Survey of Machine Unlearning6 Sep
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021Machine Unlearning of Features and Labels26 Aug
3 more
Other references · 13
- 2021Convex optimizationcited by 2,479
- 2019Machine Unlearningcited by 1,020
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2013The Composition Theorem for Differential Privacycited by 290
- 2020When Machine Unlearning Jeopardizes Privacycited by 181
- 2019Deep Learning with Gaussian Differential Privacycited by 112
- 2019Hypothesis Testing Interpretations and Renyi Differential Privacycited by 84
- 2021Canonical Noise Distributions and Private Hypothesis Testscited by 8
- 2021A Central Limit Theorem for Differentially Private Query Answeringcited by 7
- 2022Log-Concave and Multivariate Canonical Noise Distributions for Differential Privacycited by 5
- 2023Corrected generalized cross-validation for finite ensembles of penalized estimatorscited by 5
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026Missing-by-Design: Certifiable Modality Deletion for Revocable Multimodal Sentiment Analysiscited by 6
- 2025Infinitely divisible privacy and beyond I: resolution of the s2=2k conjecturecited by 0
- 2026SoK: Unlearnability and Unlearning for Model Dememorizationcited by 0
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approachcited by 0
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Controlcited by 0
- 2026ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control23 Sep 2026
- 2026Statistical Unlearning of Distributions: A Hypothesis Testing Approach15 May 2026
- 2026SoK: Unlearnability and Unlearning for Model Dememorization12 May 2026
- 2026Missing-by-Design: Certifiable Modality Deletion for Revocable Multimodal Sentiment Analysis18 Feb 2026
- 2025Infinitely divisible privacy and beyond I: resolution of the s2=2k conjecture30 Nov 2025