FIT to Forget: Robust Continual Unlearning for Large Language Models
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
While large language models (LLMs) exhibit remarkable capabilities, they increasingly face demands to unlearn memorized privacy-sensitive, copyrighted, or harmful content. Existing unlearning methods primarily focus on single-shot scenarios, whereas real-world deletion requests arrive continually. Na"ively applying these methods to sequential requests leads to severe utility degradation and catastrophic forgetting. To address this, we propose fit, a robust continual unlearning framework to process high-volume sequential deletion streams while resisting both catastrophic forgetting and post-unlearning recovery. fit stabilizes sequential updates through three synergistic mechanisms: redundancy underlineFiltering, underlineImportance-aware adaptive algorithm selection, and underlineTargeted layer attribution. Furthermore, to facilitate rigorous evaluation, we introduce PCH, a unified benchmark encompassing Personal, Copyrighted, and Harmful content, alongside two symmetric metrics, Forget Degree (F.D.) and Retain Utility (R.U.), to systematically quantify forgetting-utility trade-offs. Extensive experiments across five LLMs (up to 14B parameters) demonstrate that fit consistently achieves state-of-the-art unlearning efficacy and utility preservation. Notably, even after hundreds of sequential requests, fit preserves strong downstream (eg, GSM8K, MMLU) performance and exhibits superior resilience against relearning and quantization recovery attacks.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 50 of its 61 references that are in the map. First posted on arXiv 29 Jan 2026.
Builds on
50 of 61 references.
Closest ancestors · 24
Same direction, newest first
- 2025Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness6 Jun
- 2025Rethinking Machine Unlearning in Image Generation Models3 Jun
- 2025Editing as Unlearning: Are Knowledge Editing Methods Strong Baselines for Large Language Model Unlearning?26 May
- 2025Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs22 May
- 2025OBLIVIATE: Robust and Practical Machine Unlearning for Large Language Models7 May
- 2025Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning28 Jan
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct
- 2024Edge Unlearning is Not "on Edge"! An Adaptive Exact Unlearning System on Resource-Constrained Devices14 Oct
- 2024A Closer Look at Machine Unlearning for Large Language Models10 Oct
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspective24 Jul
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
12 more
- 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun
- 2024What makes unlearning hard and what to do about it3 Jun
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
- 2024Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning4 Apr
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023In-Context Unlearning: Language Models as Few Shot Unlearners11 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Towards Adversarial Evaluations for Inexact Machine Unlearning17 Jan
Other references · 26
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2025Qwen3 Technical Reportcited by 8,195
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2024GPT-4o System Cardcited by 4,467
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,168
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,881
- 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,793
- 2024A Survey on LLM-as-a-Judgecited by 1,384
14 more
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2019Machine Unlearningcited by 1,020
- 2024Yi: Open Foundation Models by 01.AIcited by 706
- 2023Dissecting Recall of Factual Associations in Auto-Regressive Language Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 224
- 2023Copyright Violations and Large Language Modelscited by 108
- 2022The Shapley Value in Machine Learningcited by 97
- 2025Spurious Forgetting in Continual Learning of Language Modelscited by 47
- 2024Continual Forgetting for Pre-trained Vision Modelscited by 29
- 2024Large Language Models Relearn Removed Conceptscited by 26
- 2025Retrieval Augmented Generation with Collaborative Filtering for Personalized Text Generationcited by 23
- 2025Continual Unlearning for Foundational Text-to-Image Models without Generalization Erosioncited by 11
- 2025Precise In-Parameter Concept Erasure in Large Language Modelscited by 11
Built on by
Not cited yet.