AI RESEARCH

Sequential Subspace Noise Injection Prevents Accuracy Collapse in Certified Unlearning

arXiv CS.LG

ArXi:2601.05134v2 Announce Type: replace Certified unlearning based on differential privacy offers strong guarantees but remains largely impractical: the noisy fine-tuning approaches proposed so far achieve these guarantees but severely reduce model accuracy. We propose sequential noise scheduling, which distributes the noise budget across orthogonal subspaces of the parameter space, rather than injecting it all at once. This simple modification mitigates the destructive effect of noise while preserving the original certification guarantees.