Representation Unlearning: Forgetting through Information Compression
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning seeks to remove the influence of specific training data from a model, a need driven by privacy regulations and robustness concerns. Existing approaches typically modify model parameters, but such updates can be unstable, computationally costly, and limited by local approximations. We introduce Representation Unlearning, a framework that performs unlearning directly in the model's representation space. Instead of modifying model parameters, we learn a transformation over representations that imposes an information bottleneck: maximizing mutual information with retained data while suppressing information about data to be forgotten. We derive variational surrogates that make this objective tractable and show how they can be instantiated in two practical regimes: when both retain and forget data are available, and in a zero-shot setting where only forget data can be accessed. Experiments across several benchmarks demonstrate that Representation Unlearning achieves more reliable forgetting, better utility retention, and greater computational efficiency than parameter-centric baselines.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 43 of its 56 references that are in the map. First posted on arXiv 29 Jan 2026.
Builds on
43 of 56 references.
Closest ancestors · 14
Same direction, newest first
- 2024LoRA Unlearns More and Retains More (Student Abstract)16 Nov
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024Adversarial Machine Unlearning11 Jun
- 2024Towards Natural Machine Unlearning24 May
- 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening15 Aug
- 2023Boundary Unlearning21 Mar
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher17 May
- 2022Zero-Shot Machine Unlearning14 Jan
- 2021Fast Yet Effective Machine Unlearning17 Nov
2 more
Other references · 29
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2016Understanding intermediate layers using linear classifier probescited by 1,279
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2019Machine Unlearningcited by 1,020
- 2017A Closer Look at Memorization in Deep Networkscited by 936
- 2016Deep Variational Information Bottleneckcited by 915
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2023Progress measures for grokking via mechanistic interpretabilitycited by 822
- 2020Prevalence of Neural Collapse during the terminal phase of deep learning trainingcited by 713
- 2017Network Dissection: Quantifying Interpretability of Deep Visual Representationscited by 703
- 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 679
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
17 more
- 2019On Variational Bounds of Mutual Informationcited by 550
- 2018Exploiting Unintended Feature Leakage in Collaborative Learningcited by 509
- 2018What you can cram into a single vector: Probing sentence embeddings for linguistic propertiescited by 452
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 388
- 2020Amnesiac Machine Learningcited by 305
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2016On the Expressive Power of Deep Neural Networkscited by 302
- 2017Certified Defenses for Data Poisoning Attackscited by 288
- 2023LEACE: Perfect linear concept erasure in closed formcited by 254
- 2020Influence Functions in Deep Learning Are Fragilecited by 247
- 2020Compositional Explanations of Neuronscited by 172
- 2020Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observationscited by 171
- 2023Low-Cost High-Power Membership Inference Attackscited by 99
- 2020Federated Unlearningcited by 27
- 2023Robust Concept Erasure via Kernelized Rate-Distortion Maximizationcited by 10
Built on by
Citing papers per year: 2026: 1.
1 paper.