Diagnosing Forgetting in AI Models Without Original Data

Zahra Dehghani, Pablo Piantanida, Mohammadhadi Shateri· September 3, 2026 View original

Key takeaways

  • Low forget accuracy after unlearning does not guarantee complete erasure of class structure.
  • Forget classes can often be recovered from unlearned models even without original data.
  • The Source-Free Relearning Audit (SFRA) and Relearning Score (RS) provide tools to diagnose this recoverability.
  • Many existing unlearning methods may not meet stringent data erasure requirements.

Who benefits

CybersecurityHealthcareBFSIAI Ethics & GovernanceData Privacy

Summary

This research introduces a source-free method, SFRA, to diagnose whether "unlearned" classes in AI models can be recovered without access to original training data. It also proposes a Relearning Score to quantify this recoverability, revealing that many unlearning methods leave recoverable class structures.

The field of machine unlearning aims to remove specific information, like a "forget class," from a model while preserving its general knowledge. However, simply achieving low accuracy on the forget class doesn't guarantee that the model has truly erased its understanding of that class. Prior work has shown that these "forgotten" classes can sometimes be recovered, but typically require access to original data or auxiliary information. This paper investigates class relearning in a strictly source-free environment, meaning no original forget or retain samples, auxiliary data, or reference checkpoints are used. The core question is whether a forget class can be recovered by only updating the classifier head of an unlearned model. The researchers propose a theoretical framework and a practical tool called Source-Free Relearning Audit (SFRA). SFRA generates synthetic embeddings and uses model confidence to construct probes, then updates the classifier. To quantify the extent of forgetting, they introduce the Relearning Score (RS), which measures both forget-class recovery and retain-accuracy preservation. Experiments across various datasets and models demonstrate that several approximate unlearning methods leave substantial recoverable structure, sometimes even exceeding the recoverability of a model that was never trained on the class.

Why it matters

Understanding the true extent of "unlearning" is critical for data privacy, security, and regulatory compliance, especially when models are deployed in sensitive applications.

How to implement this in your domain

  1. 1Assess the robustness of current model unlearning strategies against source-free relearning attacks.
  2. 2Integrate the Relearning Score (RS) into model evaluation pipelines to quantify true forgetting.
  3. 3Develop more robust unlearning techniques that genuinely erase class information beyond just altering decision boundaries.
  4. 4Review data governance policies to account for the potential recoverability of "unlearned" data.

Original post by Zahra Dehghani, Pablo Piantanida, Mohammadhadi Shateri

"arXiv:2609.02018v1 Announce Type: new Abstract: Class unlearning aims to remove a model's ability to recognize designated forget classes while preserving performance on retain classes. However, low forget accuracy after unlearning does not necessarily mean the class structure has…"

View on X

Originally posted by Zahra Dehghani, Pablo Piantanida, Mohammadhadi Shateri on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses