Approximate Data Deletion from Machine Learning Models
About
Deleting data from a trained machine learning (ML) model is a critical task in many applications. For example, we may want to remove the influence of training points that might be out of date or outliers. Regulations such as EU's General Data Protection Regulation also stipulate that individuals can request to have their data deleted. The naive approach to data deletion is to retrain the ML model on the remaining data, but this is too time consuming. In this work, we propose a new approximate deletion method for linear and logistic models whose computational cost is linear in the the feature dimension $d$ and independent of the number of training data $n$. This is a significant gain over all existing methods, which all have superlinear time dependence on the dimension. We also develop a new feature-injection test to evaluate the thoroughness of data deletion from ML models.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Machine Unlearning | CIFAR-10 | Accf1.86 | 45 | |
| Single-class Unlearning | CIFAR-10 | Retain Accuracy99.58 | 42 | |
| Class Unlearning | CIFAR-10 (test) | Test Accuracy89.1 | 42 | |
| Machine Unlearning | CIFAR-10 Random Forget (50%) | Unlearn Acc20.49 | 27 | |
| Object Classification Unlearning | CIFAR-10 (10% random data forgetting) | UA1.07 | 25 | |
| Image Classification Unlearning | CIFAR-10 50% Random Forgetting | MIA0.0729 | 21 | |
| Image Classification Unlearning | CIFAR-100 50% random data forgetting | MIA (Membership Inference Attack)17.54 | 21 | |
| Machine Unlearning | CIFAR-100 Random Forget 50% | MIA3.02 | 19 | |
| Machine Unlearning | Tiny-Imagenet Random Forget 50%, γ=0 (test) | MIA4.34 | 19 | |
| Machine Unlearning | CIFAR-100 Random Forget (10%) | RA96.93 | 19 |