Continual Speaker Identity Unlearning with Minimal Interference
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Machine unlearning removes designated concepts or knowledge from pre-trained models. Recent work has extended this paradigm to speaker identity unlearning in zero-shot text-to-speech (ZS-TTS), the task of selectively erasing a model's ability to replicate a speaker's voice. Existing methods, however, quietly assume all unlearning requests arrive at once; an unrealistic assumption, since privacy-motivated removals arrive sequentially over time. We show this assumption breaks state-of-the-art methods: unlearning each new speaker fully revives previously unlearned speakers, reintroducing the very privacy risk unlearning was meant to eliminate. We present Cumulative ORThogonal Identity Suppression (CORTIS), the first framework for continual speaker identity unlearning in ZS-TTS that requires no access to previously-unlearned speaker data. CORTIS combines Fisher-information-based parameter masking, which localizes updates to speaker-relevant weights, with orthogonal projection against subspaces spanned by prior unlearning updates. With VoiceBox, CORTIS unlearns each requested speaker while keeping previously unlearned speakers forgotten across long request sequences, substantially outperforming sequential application of prior methods. The demo is available at https://cumulativeortis.github.io/ .
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 32 of its 44 references that are in the map. First posted on arXiv 25 May 2026.
Builds on
32 of 44 references.
Closest ancestors · 5
Same direction, newest first
- 2025Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speech27 Jul
- 2024On Large Language Model Continual Unlearning14 Jul
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 27
- 2017Attention Is All You Needcited by 60,361
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
- 2020wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representationscited by 3,905
- 2021WavLM: Large-Scale Self-Supervised Pre-Training for Full Stack Speech Processingcited by 1,657
- 2016Progressive Neural Networkscited by 1,361
- 2020DiffWave: A Versatile Diffusion Model for Audio Synthesiscited by 1,354
- 2018Continual Lifelong Learning with Neural Networks: A Reviewcited by 1,330
- 2017Continual Learning with Deep Generative Replaycited by 1,158
- 2017Memory Aware Synapses: Learning what (not) to forgetcited by 1,105
- 2021Train Short, Test Long: Attention with Linear Biases Enables Input Length Extrapolationcited by 1,103
- 2018Experience Replay for Continual Learningcited by 1,095
- 2019Machine Unlearningcited by 1,061
15 more
- 2017PackNet: Adding Multiple Tasks to a Single Network by Iterative Pruningcited by 898
- 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
- 2023Neural Codec Language Models are Zero-Shot Text to Speech Synthesizerscited by 752
- 2018Overcoming catastrophic forgetting with hard attention to the taskcited by 681
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2018Progress & Compress: A scalable framework for continual learningcited by 520
- 2023Voicebox: Text-Guided Multilingual Universal Speech Generation at Scalecited by 379
- 2019Orthogonal Gradient Descent for Continual Learningcited by 369
- 2021Gradient Projection Memory for Continual Learningcited by 348
- 2018Continual Learning of Context-dependent Processing in Neural Networkscited by 179
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
- 2022NaturalSpeech: End-to-End Text to Speech Synthesis with Human-Level Qualitycited by 152
- 2023Libriheavy: a 50,000 hours ASR corpus with punctuation casing and contextcited by 85
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspectivecited by 10
- 2025Locality-Aware Continual Unlearning for Diffusion Modelscited by 5
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Speech Unlearning
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speech
- 2026Evaluating Machine Unlearning in ASR
- 2026Speaker Identity in Non-Verbal Vocalizations: Conditional Distillation and Mixture of Experts Approach
- 2025Quantum-Inspired Audio Unlearning: Towards Privacy-Preserving Voice Biometrics
- 2026Machine Unlearning for Speech Question Answering in Large Audio-Language Models
- 2026Speaker-Invariant Representation Learning for Spoofing Detection via Gradient Reversal and A Variational Information Bottleneck
- 2026Adding Voice Cloning to Text-to-Audio-Video Models with a Single Zero-Initialised Layer