---
title: Unlearning Efficiency Score
url: https://www.emergentmind.com/topics/unlearning-efficiency-score
type: topic
---

# Unlearning Efficiency Score

The Unlearning Efficiency Score (UES) is a class of composite metrics developed to quantify the trade-off between the computational resources required to remove data influence from a trained machine learning model and the residual utility of the model after unlearning. UES metrics have become central to benchmarking the practical feasibility and comparative performance of machine unlearning algorithms, which seek to satisfy privacy, compliance, and responsible AI standards by efficiently deleting specific data contributions from models without expensive full retraining.

## 1. Fundamental Definition and Motivations

The central motivation for defining Unlearning Efficiency Scores is to provide a single, interpretable scalar that encapsulates the dual objectives of machine unlearning: (i) minimizing the resource or time overhead compared to full retraining and (ii) preserving model utility (accuracy, F1, AUC, or other domain-appropriate metrics) after the unlearning event. UES-style metrics enable principled, apples-to-apples comparison of different unlearning methods, hardware implementations, and task domains, facilitating both theoretical analysis and empirical benchmarking [2604.16760][2502.17323][2408.04140].

The explicit form of a UES depends on which dimensions (e.g., time, quality, fairness, per-sample cost, memory) are considered, but the unifying feature is that efficiency (typically fraction of retraining cost saved) is combined—product, ratio, or geometric mean—with a measure of utility preservation or forgetting effectiveness.

## 2. Classical Forms and Mathematical Formulation

The most widespread forms of the Unlearning Efficiency Score can be characterized as follows:

### a) Time–Utility Product Score

For SISA unlearning and related frameworks [2604.16760], let $T_\mathrm{full}$ be the full retraining time, $T_\mathrm{shard}$ the partial retraining time (e.g., after deleting a shard), and $\Delta F_1$ the absolute drop in F1-score:

\[
\mathrm{UES} = \underbrace{\frac{T_\mathrm{full} - T_\mathrm{shard}}{T_\mathrm{full}}}_{\text{fractional retraining time saved}} \times \underbrace{(1 - |\mathrm{F1}_\mathrm{before} - \mathrm{F1}_\mathrm{after}|)}_{\text{utility retention}}
\]

High values indicate an unlearning method achieves significant speedups with negligible impact on utility. For example, in RL-based ransomware detection, SISA unlearning attained $S_T \approx 80.2\%$ (time savings) and $\Delta$F1 $\leq 0.0005$, yielding UES $\approx 0.8$ [2604.16760].

### b) Complexity Ratio (Relative Unlearning Complexity)

For convex/SGD-based regimes, the unlearning complexity ratio [2502.17323], denoted $\rho(e) = T^U_e / T^S_e$, measures the number of optimization steps needed to achieve target risk $e$ under unlearning versus full retraining:

\[
\mathrm{UES} = \frac{1}{\rho(e)}
\]

This ratio formally captures the efficiency of unlearning algorithms; efficient unlearning is typified by $\rho(e) \ll 1$.

### c) Quality–Efficiency Geometric Mean

For targeted knowledge removal in LLMs [2408.04140], UES aggregates per-task forgetting and retention:

\[
\mathrm{UES} = \sqrt{F_\text{avg} \cdot R_\text{avg}}
\]

where $F_\text{avg}$ is average forgetting on targeted data and $R_\text{avg}$ is average performance retention on non-target data.

### d) Resource–Quality Weighted Aggregates

In methods such as VILA [2508.21300], UES can aggregate time efficiency, parameter efficiency, and final quality via a weighted geometric mean:

\[
\mathrm{UES} = \left(\eta_\mathrm{param}\right)^{\alpha} \times \left(\eta_\mathrm{time}\right)^{\beta} \times (\mathrm{QualityGain})^{\gamma}
\]

with user-chosen weights reflecting deployment priorities.

### e) Attack Reduction per Unit Cost (ASR-based)

For attack-driven metrics [2512.04457], e.g., unlearning harmful behaviors in LLMs, UES is defined as:

\[
\mathrm{UES} = \frac{\Delta \mathrm{ASR}}{C}
\]

with $\Delta \mathrm{ASR}$ the reduction in attack success rate and $C$ the GPU-hours, yielding interpretable units of (percentage points per GPU-hour).

## 3. Methodological Variants and Domain-Specific Extensions

Variation exists in the operationalization of UES across learning paradigms and data regimes:

- In federated settings, the UES concept extends to **efficiency-fairness scores**, which measure both overall time saved and the variance of client costs normalized by their contribution factor [2508.09866].
- For stochastic convex optimization, UES incorporates not just cost ratio but also excess population risk achieved at that cost [2307.11228].
- In unlearning benchmarks and competitions, UES aggregates empirical measures of “forgetting quality”, utility, and cost within one ranking score [2406.09073].

**Table 1: UES Instantiations Across Frameworks**

| Reference            | Efficiency Term         | Quality Term                  | Aggregation    |
|----------------------|------------------------|-------------------------------|---------------|
| [2604.16760]         | Fractional time saved  | F1-score retention            | Product       |
| [2502.17323]         | Step count reduction   | Target excess risk achieved   | Inverse prod. |
| [2408.04140]         | n/a (apply to LLMs)    | Forget/retain accuracy        | Geometric mean|
| [2508.21300]         | Param/time efficiency  | Final utility                 | Weighted geom |
| [2512.04457]         | GPU-hr reduction       | Attack success reduction      | Ratio         |
| [2504.06658]         | Update step reduction  | MRD-/difficulty-normalized    | Normalized ratio|

## 4. Theoretical Properties and Phase Regimes

Unlearning efficiency metrics provide the foundation for rigorous complexity-theoretic results. In phase diagrams for convex settings, three regimes are established [2502.17323]:

- **Trivial regime**: Unlearning is as simple as adding noise, yielding negligible computational cost ($\rho(e) \to 0$).
- **Efficient regime**: Unlearning is strictly less costly than retraining ($\rho(e) \ll 1$), and UES is high.
- **Impossible regime**: Unlearning cannot be faster than retraining ($\rho(e) \to 1$), UES approaches baseline.

These regimes are explicit functions of problem dimension, fraction of data to forget, and the tightness of privacy constraints, directly visible in the analytic form of $\rho(e)$.

## 5. Practical Evaluation and Benchmarking Protocols

Empirical measurement of UES requires careful control of confounding experimental factors. Benchmarking protocols from leading competitions [2406.09073] integrate:

- **Empirical forgetting quality**, typically measured by membership-inference attacks or statistical distinguishability from ground-truth retrained models.
- **Model utility** post-unlearning, via test/retain accuracy.
- **Resource consumption**, standardized by wall-clock time, GPU-hours, number of optimization steps, or parameter footprint.

The NeurIPS Unlearning Competition standardized a composite UES ("Final score") as the product of forgetting quality, utility retention, and test accuracy ratios, bounded in $[0,2]$:

\[
\mathrm{Final~score} = \mathcal{F} \cdot \frac{\mathrm{Acc}(D, \theta^u)}{\mathrm{Acc}(D, \theta^r)} \cdot \frac{\mathrm{Acc}(D_\mathrm{test}, \theta^u)}{\mathrm{Acc}(D_\mathrm{test}, \theta^r)}
\]

This procedure preserved method ranking across instantiations and allowed practical trade-off visualization for SOTA algorithms [2406.09073].

## 6. Efficiency Score Extensions: Sample Difficulty and Influence 

Recent advances incorporate *sample-level properties* into efficiency scoring. Memory Removal Difficulty (MRD) [2504.06658] quantifies per-sample unlearning hardness as the local curvature of the log-likelihood loss landscape, supporting curriculum sampling and difficulty-normalized UES:

\[
\mathrm{UES} = \frac{\sum_{i=1}^{N_f} I_i}{M_\text{total} \cdot C \cdot (1+\Delta UT)}
\]

where $I_i = 1/\mathrm{MRD}(x^i; \theta)$, $M_\text{total}$ the number of updates to unlearn, and $\Delta UT$ the utility degradation. This formally links inherent instance difficulty to realized efficiency gains.

Influence-based reductions [2512.05254][2512.04457] propose disregarding low-influence points in the forget set, yielding empirical time savings up to 50% with no accuracy penalty. The associated UES is computed as the fraction of baseline runtime saved.

## 7. Limitations and Interpretational Considerations

UES metrics, while powerful synthesis tools, are sensitive to:

- The definition and weight given to “quality” versus “efficiency,” especially as absolute losses approach zero or task baselines diverge.
- Underlying resource models (e.g., wall-time, GPU-hours versus FLOPs), which may confound fair comparisons across hardware.
- Scale: for extremely small forget sets, UES can be inflated without meaningful privacy gain unless quality terms are properly normalized [2512.04457][2504.06658].

Additionally, UES does not diagnose whether a method achieves formal $(\epsilon, \delta)$-unlearning guarantees, and should be interpreted in parallel with rigorous compliance and attack-based audits.

---

In summary, the Unlearning Efficiency Score and its variants constitute a core analytic and empirical apparatus for assessing, ranking, and optimizing machine unlearning algorithms. Rigorous constructions and phase-theoretic analysis coexist with pragmatic, domain-adapted variants, collectively advancing the understanding of privacy-preserving, cost-effective model editing [2604.16760][2502.17323][2504.06658][2512.05254][2408.04140][2512.04457][2508.21300][2508.09866][2307.11228][2406.09073].

Source: https://www.emergentmind.com/topics/unlearning-efficiency-score