Face Identity Unlearning for Retrieval via Embedding Dispersion
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Face recognition systems rely on learning highly discriminative and compact identity clusters to enable accurate retrieval. However, as with other surveillance-oriented technologies, such systems raise serious privacy concerns due to their potential for unauthorized identity tracking. While several works have explored machine unlearning as a means of privacy protection, their applicability to face retrieval - especially for modern embedding-based recognition models - remains largely unexplored. In this work, we study the problem of face identity unlearning for retrieval systems and present its inherent challenges. The goal is to make selected identities unretrievable by dispersing their embeddings on the hypersphere and preventing the formation of compact identity clusters that enable re-identification in the gallery. The primary challenge is to achieve this forgetting effect while preserving the discriminative structure of the embedding space and the retrieval performance of the model for the remaining identities. To address this, we evaluate several existing approximate class unlearning methods (e.g., Random Labeling, Gradient Ascent, Boundary Unlearning, and other recent approaches) in the context of face retrieval and propose a simple yet effective dispersion-based unlearning approach. Extensive experiments on standard benchmarks (VGGFace2, CelebA) demonstrate that our method achieves superior forgetting behavior while preserving retrieval utility.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 39 of its 52 references that are in the map. First posted on arXiv 15 Dec 2025.
Builds on
39 of 52 references.
Closest ancestors · 8
Same direction, newest first
- 2024Zero-Shot Class Unlearning in CLIP with Synthetic Samples10 Jul
- 2024Contrastive Unlearning: A Contrastive Approach to Machine Unlearning19 Jan
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
- 2021Adaptive Machine Unlearning8 Jun
- 2021Remember What You Want to Forget: Algorithms for Machine Unlearning4 Mar
Other references · 31
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2014Going Deeper with Convolutionscited by 4,241
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,849
- 2019Machine Unlearningcited by 1,061
- 2018CosFace: Large Margin Cosine Loss for Deep Face Recognitioncited by 971
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 914
- 2021Membership Inference Attacks From First Principlescited by 878
19 more
- 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 737
- 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 624
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 618
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 465
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
- 2021MagFace: A Universal Representation for Face Recognition and Quality Assessmentcited by 334
- 2020CurricularFace: Adaptive Curriculum Learning Loss for Deep Face Recognitioncited by 321
- 2020Amnesiac Machine Learningcited by 319
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 311
- 2018Additive Margin Softmax for Face Verificationcited by 278
- 2020Partial FC: Training 10 Million Identities on a Single Machinecited by 163
- 2017Deep Metric Learning with Angular Losscited by 107
- 2017L2-constrained Softmax Loss for Discriminative Face Verificationcited by 96
- 2015DeepID3: Face Recognition with Very Deep Neural Networkscited by 62
- 2021Face Transformer for Recognitioncited by 46
- 2022Certified Graph Unlearningcited by 46
- 2025The European Union general data protection regulation: what it is and what it meanscited by 31
- 2020Selective Forgetting of Deep Networks at a Finer Level than Samplescited by 13
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026PIU: Proximity-guided Identity Unlearning in ID-Conditioned Diffusion Models
- 2025CURE: Centroid-guided Unsupervised Representation Erasure for Facial Recognition Systems
- 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systems
- 2025Training for Identity, Inference for Controllability: A Unified Approach to Tuning-Free Face Personalization
- 2023Controllable Inversion of Black-Box Face Recognition Models via Diffusion
- 2024Generative Unlearning for Any Identity
- 2026The Nearest Target Is the Wrong One: Target Separation in Arc2Face Identity Unlearning
- 2024Distribution-Level Feature Distancing for Machine Unlearning: Towards a Better Trade-off Between Model Utility and Forgetting