mlsanityData to 7 Oct 2026

Statistical Unlearning of Distributions: A Hypothesis Testing Approach

arXiv 2605.16645 ↗First posted 15 May 2026math.ST cs.IT cs.LGcited by 0

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

Machine learning systems increasingly face requirements to forget not only individual data points, but entire domains of information, such as toxic language, copyrighted corpora, or demographic biases. This raises a fundamental dilemma of statistical-computational tradeoffs: removing all samples from an unwanted domain may be computationally prohibitive, while randomly removing a subset may not provide distribution-level statistical guarantees. We propose a statistical framework for distributional unlearning, in which domains are modeled as probability distributions, and the goal is to remove a carefully chosen subset of samples that reduces the effect of an unwanted distribution while preserving performance on a desired one. We formalize this using a hypothesis test of the edited data with the desired and unwanted domains, leading to an interpretable and robust criterion for selecting samples to remove. Within this statistical framework, we characterize the fundamental region of the allowable edited data distributions and the removal-preservation Pareto frontier for a broad class of distribution families. This includes parametric families such as shifted Gaussians of arbitrary dimension, a one-dimensional location family with log-concave noise, and the one-dimensional Poisson family. It also includes nonparametric families such as the Gaussian white noise model, a canonical model for nonparametric regression. We prove composition rules that describe how distributional unlearning behaves across multimodal unwanted domains, and introduce a central-limit behavior for the removal-preservation baselines when composing a large number of such families. Finally, we provide finite sample guarantees by providing Pareto frontiers for some selection algorithms, and observe an information-computation gap.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 24 of its 45 references that are in the map. First posted on arXiv 15 May 2026.

Builds on

24 of 45 references.

Closest ancestors · 13

Same direction, newest first

  1. 2025Gaussian Certified Unlearning in High Dimensions: A Hypothesis Testing Approach15 Oct
  2. 2025Distributional Machine Unlearning via Selective Data Removal20 Jul
  3. 2025Certified Unlearning for Neural Networks8 Jun
  4. 2025When to Forget? Complexity Trade-offs in Machine Unlearning24 Feb
  5. 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec
  6. 2024Towards Certified Unlearning for Deep Neural Networks1 Aug
  7. 2024Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning18 Jan
  8. 2023Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting1 Dec
  9. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  10. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  11. 2023Towards Unbounded Machine Unlearning20 Feb
  12. 2022Forget Unlearning: Towards True Data-Deletion in Machine Learning17 Oct
1 more
  1. 2021Fast Yet Effective Machine Unlearning17 Nov

Other references · 11

  1. 2019Machine Unlearningcited by 1,020
  2. 2019Certified Data Removal from Machine Learning Modelscited by 512
  3. 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 442
  4. 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
  5. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  6. 2023LEACE: Perfect linear concept erasure in closed formcited by 254
  7. 2020Approximate Data Deletion from Machine Learning Modelscited by 250
  8. 2017Autoencoding Variational Inference For Topic Modelscited by 168
  9. 2018Adversarial Removal of Demographic Attributes from Text Datacited by 166
  10. 2025Language Models May Verbatim Complete Text They Were Not Explicitly Trained Oncited by 20
  11. 2022Finite-Sample Maximum Likelihood Estimation of Locationcited by 7

Built on by

Not cited yet.