Preserving Privacy Through Dememorization: An Unlearning Technique For Mitigating Memorization Risks In Language Models (2023.emnlp-main)
Copied to clipboard
| Challenge: | Large Language models (LLMs) are trained on vast amounts of data, including sensitive information that poses a risk to personal privacy if exposed. |
| Approach: | They propose a novel unlearning approach that utilizes an efficient reinforcement learning feedback loop via proximal policy optimization to incentivize the LLMs to learn a paraphrasing policy to unlearn the pre-training data. |
| Outcome: | The proposed approach surpasses strong baselines and state-of-the-art methods in terms of its ability to generalize and strike a balance between privacy and LLM performance. |
Similar Papers
Knowledge Unlearning for Mitigating Privacy Risks in Language Models (2023.acl-long)
Copied to clipboard
| Challenge: | Recent work shows that an adversary can extract training data from Pretrained Language Models including Personally Identifiable Information (PII) such as names, phone numbers, and email addresses. |
| Approach: | They propose to use knowledge unlearning to reduce privacy risks for LMs by performing gradient ascent on target token sequences instead of trying to unlearn all the data at once. |
| Outcome: | The proposed method can give a stronger empirical privacy guarantee in scenarios where the data vulnerable to extraction attacks are known a priori while being much more efficient and robust. |
Learning to Refuse: Towards Mitigating Privacy Risks in LLMs (2025.coling-main)
Copied to clipboard
| Challenge: | Large language models (LLMs) exhibit remarkable capabilities in understanding and generating natural languages, but can inadvertently memorize private information, posing significant privacy risks. |
| Approach: | They propose to use a dataset to evaluate machine unlearning methods for protecting personal data in a realistic scenario. |
| Outcome: | The proposed model outperforms baseline methods by 5.65 points and protects target individuals’ personal data while maintaining general capabilities. |
Unintended Memorization of Sensitive Information in Fine-Tuned Language Models (2026.eacl-long)
Copied to clipboard
Marton Szep, Jorge Marin Ruiz, Georgios Kaissis, Paulina Seidl, Rüdiger von Eisenhart-Rothe, Florian Hinterwimmer, Daniel Rueckert
| Challenge: | Large Language Models (LLMs) on sensitive datasets carry a substantial risk of unintended memorization and leakage of Personally Identifiable Information (PII) prior studies have analyzed memorizing dynamics in LLMs during pre-training and fine-tuning. |
| Approach: | They investigate the vulnerability of PII that appears only in model inputs, not in training targets. |
| Outcome: | The proposed methods show that post-training methods provide more consistent privacy-utility trade-offs . |
Private Memorization Editing: Turning Memorization into a Defense to Strengthen Data Privacy in Large Language Models (2025.acl-long)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) memorize and therefore, among huge amounts of uncontrolled data, may memorize Personally Identifiable Information (PII). |
| Approach: | They propose a method that uses a model knowledge to memorize PII from training data to mitigate the memorization of PI I. |
| Outcome: | The proposed method reduces the number of leaked PIIs in a number of configurations while making it more robust against privacy Training Data Extraction attacks. |
Privacy-R1: Privacy-Aware Multi-LLM Agent Collaboration via Reinforcement Learning (2026.acl-long)
Copied to clipboard
| Challenge: | Prior approaches to rewriting large language models shatters linguistic coherence and removes privacy-sensitive information. |
| Approach: | They propose a framework that trains an agent to dynamically route text chunks . it implicitly distinguishes between replaceable Personally Identifiable Information (PII) and task-critical PII . |
| Outcome: | The proposed framework achieves state-of-the-art on the privacy-utility frontier . it trains an agent to dynamically route text chunks, learning a policy that balances privacy leakage and task performance. |
Reveal and Release: Iterative LLM Unlearning with Self-generated Data (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Existing approaches to unlearning large language models assume full access to the forget dataset, overlooking two key challenges: (1) Forget data is often privacy-sensitive, rare, or legally regulated, making it expensive or impractical to obtain (2) The distribution of available forget data may not align with how that information is represented within the model. |
| Approach: | They propose a “Reveal-and-Release” method to unlearn with self-generated data, prompting the model to reveal what it knows using optimized instructions. |
| Outcome: | The proposed method removes the influence of undesirable data from the model. |
Unlearn What You Want to Forget: Efficient Unlearning for LLMs (2023.emnlp-main)
Copied to clipboard
| Challenge: | Large language models (LLMs) can be used to memorize a vast amount of data, but can suffer from privacy issues and data protection violations. |
| Approach: | They propose an efficient unlearning framework that could update LLMs without retraining them . they introduce lightweight unlearning layers learned with a selective teacher-student objective into transformers . |
| Outcome: | The proposed framework could update LLMs without having to retrain the whole model after data removals. |
DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Models (2023.emnlp-main)
Copied to clipboard
| Challenge: | Existing studies have demonstrated that pretrained language models memorize and regurgitate a significant portion of training data, including atypical data points that appear only once in the training data. |
| Approach: | They propose a method to locate and erase risky neurons in order to eliminate the impact of privacy data in the model in batches. |
| Outcome: | The proposed method eliminates the impact of privacy data in the model in batches without affecting the model's performance. |
Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Language models (LMs) demonstrate exceptional capabilities on tasks, but are vulnerable to extraction attacks. |
| Approach: | They propose Privacy Protection via Optimal Parameters (POP) which induces the model to forget about some of its training data. |
| Outcome: | The proposed method outperforms the state-of-the-art in retaining LM performance on 9 classification and 4 dialogue benchmarks. |
Large Language Models Can Be Contextual Privacy Protection Learners (2024.emnlp-main)
Copied to clipboard
Yijia Xiao, Yiqiao Jin, Yushi Bai, Yue Wu, Xianjun Yang, Xiao Luo, Wenchao Yu, Xujiang Zhao, Yanchi Liu, Quanquan Gu, Haifeng Chen, Wei Wang, Wei Cheng
| Challenge: | Large Language Models (LLMs) have demonstrated remarkable linguistic comprehension and generation capability, but when applied to specialized industries, they face challenges such as hallucination, insufficient domain knowledge, and failing to incorporate the latest domain knowledge. |
| Approach: | They propose a paradigm for fine-tuning LLMs that effectively injects domain-specific knowledge while safeguarding inference-time data privacy. |
| Outcome: | The proposed model protects private data while enhancing the model's knowledge. |