An Illusion of Unlearning? Assessing Machine Unlearning Through Internal Representations
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
While numerous machine unlearning (MU) methods have recently been developed with promising results in erasing the influence of forgotten data, classes, or concepts, they are also highly vulnerable-for example, simple fine-tuning can inadvertently reintroduce erased concepts. In this paper, we address this contradiction by examining the internal representations of unlearned models, in contrast to prior work that focuses primarily on output-level behavior. Our analysis shows that many state-of-the-art MU methods appear successful mainly due to a misalignment between last-layer features and the classifier, a phenomenon we call feature-classifier misalignment. In fact, hidden features remain highly discriminative, and simple linear probing can recover near-original accuracy. Assuming neural collapse in the original model, we further demonstrate that adjusting only the classifier can achieve negligible forget accuracy while preserving retain accuracy, and we corroborate this with experiments using classifier-only fine-tuning. Motivated by these findings, we propose MU methods based on a class-mean features (CMF) classifier, which explicitly enforces alignment between features and classifiers. Experiments on standard benchmarks show that CMF-based unlearning reduces forgotten information in representations while maintaining high retain accuracy, highlighting the need for faithful representation-level evaluation of MU.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 20 of its 41 references that are in the map. First posted on arXiv 9 Apr 2026.
Builds on
20 of 41 references.
Closest ancestors · 9
Same direction, newest first
- 2025Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols10 Mar
- 2024Don't Forget Too Much: Towards Machine Unlearning on Feature Level16 Jun
- 2024An Information Theoretic Evaluation Metric For Strong Unlearning28 May
- 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
- 2023Towards Machine Unlearning Benchmarks: Forgetting the Personal Identities in Facial Recognition Systems3 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023Towards Unbounded Machine Unlearning20 Feb
- 2021Fast Yet Effective Machine Unlearning17 Nov
- 2021On the Necessity of Auditable Algorithmic Definitions for Machine Unlearning22 Oct
Other references · 11
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2019Machine Unlearningcited by 1,020
- 2020Prevalence of Neural Collapse during the terminal phase of deep learning trainingcited by 713
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 298
- 2018Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learningcited by 219
- 2021A Survey on Bias in Visual Datasetscited by 84
- 2024Machine Unlearning for Image-to-Image Generative Modelscited by 47
- 2024Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Modelscited by 14
- 2023Forgettable Federated Linear Learning with Certified Data Unlearningcited by 4
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluationcited by 1
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluationcited by 0
- 2026Association Restoration Test: Revealing Restorable Shortcuts after Unlearningcited by 0
- 2026The BatchNorm Illusion: Diagnosing Normalization Artifacts in Machine Unlearning Evaluation8 Sep 2026
- 2026Association Restoration Test: Revealing Restorable Shortcuts after Unlearning7 Jul 2026
- 2026Classification-Head Bias in Class-Level Machine Unlearning: Diagnosis, Mitigation, and Evaluation9 May 2026