NextLaureate

PhD Studentship: Robust, Certified, and Scalable Federated Machine Unlearning for Privacy-Preserving AI

Back to Research Opportunities

PhD Studentship: Robust, Certified, and Scalable Federated Machine Unlearning for Privacy-Preserving AI

University of Surrey logoUniversity of Surrey
Guildford, United Kingdom
Deadline: 31 October 2026
Posted: Sep 28, 2026

NL Highlights

Develop novel federated machine unlearning algorithms with formal guarantees for privacy preservation.
Design robust unlearning protocols resilient to adversarial attacks and data influence.
Create federated-specific benchmarks and auditing tools to evaluate and verify unlearning mechanisms.

Details

Reference

PGR-2526-074

Salary & Funding

Fully funded studentship opportunity covering home university fees, additional research training, travel funds and UKRI standard rate (£21,805 for 2026/27 academic year).

Duration

3.5 years

Contact Info

Dr Pedro Porto Buarque de Gusmao

Eligibility

Open to candidates who pay UK/home rate fees.
A first-class or strong upper-second-class undergraduate degree (or a Master's degree) in Computer Science, Mathematics, Statistics, or a closely related field.
Solid grounding in machine learning and/or probability/statistics.
Programming proficiency in Python and familiarity with ML frameworks (PyTorch, JAX, or similar).

Next Steps

1
Contact potential supervisors before submitting an application.
2
Submit applications via the Computer Science PhD programme page.
3
Upload a document stating the title of the project and the name of the relevant supervisor in place of a research proposal.

Opportunity Overview

PhD Studentship: Robust, Certified, and Scalable Federated Machine Unlearning for Privacy-Preserving AI

University of Surrey

  • Computer Science

Qualification Type:

PhD

Location:

Guildford

Funding for:

UK Students

Funding amount:

Fully funded studentship opportunity covering home university fees, additional research training, travel funds and UKRI standard rate ( 21,805 for 2026/27 academic year). Funding is available for 3.5 years.

Hours:

Full Time

Placed On:

28th September 2026

Closes:

31st October 2026

Reference:

PGR-2526-074

About the Project

As federated learning systems become increasingly embedded in high stakes domains where data cannot be directly shared, such as healthcare and finance, the ability to selectively remove the influence of specific data from trained models becomes critical. Yet, despite the EU s General Data Protection Regulation (GDPR) enshrining a right to be forgotten , current federated learning practice offers no robust, scalable, or provable mechanism to guarantee this right once a model has been trained.

The distributed nature of federated settings introduces unique challenges for unlearning: the central server never directly accesses raw data, information encoded in aggregated models can persist across participants, and retraining from scratch is often computationally infeasible at scale.

In this project, you will develop the next generation of federated machine unlearning algorithms methods that can efficiently deliver genuine, verifiable, and robust erasure without sacrificing model performance or participant privacy.

Several of the most active research frontiers in this field include:

  • Certified unlearning with formal guarantees developing methods with provable erasure bounds, connecting to differential privacy and statistical divergence frameworks
  • Robustness to adversarial relearning designing unlearning protocols that remain stable under fine-tuning attacks, jailbreak-style probing, and multi-turn adversarial interaction
  • Evaluation and verification building federated-specific benchmarks and auditing tools
  • Scalable unlearning for foundation models extending federated unlearning to large pretrained models, where parameter-efficient methods must balance erasure guarantees against model utility
  • Unlearning as an AI safety primitive exploring how federated unlearning can contribute to removing hazardous or harmful knowledge from collaboratively trained models, positioning the work within the broader trustworthy AI agenda.

The project sits at the intersection of privacy-preserving machine learning, distributed systems, and trustworthy AI, with implications for regulatory compliance and real-world deployment of federated systems.

Supervisors:

Dr Pedro Porto Buarque de Gusmao and Dr Frank Guerin

Entry requirements

Open to candidates who pay UK/home rate fees. See UKCISA for further information.

Starting in January 2027. Later start dates may be possible, please contact Dr Pedro Porto Buarque de Gusmao once the deadline passes.

You will need to meet the minimum entry requirements for our PhD programme.

We are looking for a motivated and intellectually curious researcher with:

  • A first-class or strong upper-second-class undergraduate degree (or a Master's degree) in Computer Science, Mathematics, Statistics, or a closely related field
  • Solid grounding in machine learning and/or probability/statistics
  • Programming proficiency in Python and familiarity with ML frameworks (PyTorch, JAX, or similar)
  • Strong analytical and problem-solving skills
  • Good written and verbal communication in English

Experience in any of the following is desirable but not required: federated learning, differential privacy, adversarial robustness, distributed systems, or LLM fine-tuning.

How to apply

Applications should be submitted via the Computer Science PhD programme page.

In place of a research proposal, you should upload a document stating the title of the project that you wish to apply for and the name of the relevant supervisor.

Funding

Fully funded studentship opportunity covering home university fees, additional research training, travel funds and UKRI standard rate ( 21,805 for 2026/27 academic year). Funding is available for 3.5 years.

Application deadline

31 October 2026

Enquiries

Dr Pedro Porto Buarque de Gusmao

Ref

PGR-2526-074