PhD Studentship: Robust, Certified, and Scalable Federated Machine Unlearning for Privacy-Preserving AI

University of Surrey; Guildford; On-site; GBP 20,000 - 24,000; Full time

Benefits offered by this job

Fully funded

Travel funds

UKRI standard rate stipend

Job summary

University of Surrey invites applications for a PhD Studentship on Robust, Certified, and Scalable Federated Machine Unlearning for Privacy-Preserving AI. The project focuses on developing verifiable erasure methods within federated learning, addressing GDPR rights, and ensuring model performance.

Supervised by Dr Pedro Porto Buarque de Gusmao and Dr Frank Guerin, the funded position starts January 2027 with full UK fees coverage, travel funds, and UKRI standard rate stipend.

Qualifications

• First-class or strong upper-second-class undergraduate degree (or Master’s) in CS, Math, or Statistics.
• Solid grounding in ML and/or probability/statistics.
• Programming in Python with ML frameworks (PyTorch, JAX or similar).
• Good written and verbal English communication.

Responsibilities

• Develop robust, certified, scalable federated unlearning methods.
• Evaluate and verify erasure guarantees in federated settings.
• Balance erasure guarantees with model utility on large pretrained models.

Skills

Machine learning

Probability/statistics

Python programming

English communication

Education

Bachelor's degree in CS/Math/Statistics

Master's degree

Tools

PyTorch

JAX

Job description

PhD Studentship: Robust, Certified, and Scalable Federated Machine Unlearning for Privacy-Preserving AI

About the Project

As federated learning systems become increasingly embedded in high‑stakes domains where data cannot be directly shared, such as healthcare and finance, the ability to selectively remove the influence of specific data from trained models becomes critical. Yet, despite the EU’s General Data Protection Regulation (GDPR) enshrining a “right to be forgotten”, current federated learning practice offers no robust, scalable, or provable mechanism to guarantee this right once a model has been trained.

The distributed nature of federated settings introduces unique challenges for unlearning: the central server never directly accesses raw data, information encoded in aggregated models can persist across participants, and retraining from scratch is often computationally infeasible at scale.

In this project, you will develop the next generation of federated machine unlearning algorithms—methods that can efficiently deliver genuine, verifiable, and robust erasure without sacrificing model performance or participant privacy.

Several of the most active research frontiers in this field include:

• Certified unlearning with formal guarantees — developing methods with provable erasure bounds, connecting to differential privacy and statistical divergence frameworks
• Robustness to adversarial relearning — designing unlearning protocols that remain stable under fine-tuning attacks, jailbreak-style probing, and multi-turn adversarial interaction
• Evaluation and verification — building federated-specific benchmarks and auditing tools
• Scalable unlearning for foundation models — extending federated unlearning to large pretrained models, where parameter‑efficient methods must balance erasure guarantees against model utility
• Unlearning as an AI safety primitive — exploring how federated unlearning can contribute to removing hazardous or harmful knowledge from collaboratively trained models, positioning the work within the broader trustworthy AI agenda.

The project sits at the intersection of privacy-preserving machine learning, distributed systems, and trustworthy AI, with implications for regulatory compliance and real-world deployment of federated systems.

Supervisors:

Dr Pedro Porto Buarque de Gusmao and Dr Frank Guerin

Entry requirements

Open to candidates who pay UK/home rate fees. See UKCISA for further information.
Starting in January 2027. Later start dates may be possible, please contact Dr Pedro Porto Buarque de Gusmao once the deadline passes.

You will need to meet the minimum entry requirements for our PhD programme.

We are looking for a motivated and intellectually curious researcher with:

• A first-class or strong upper-second-class undergraduate degree (or a Master's degree) in Computer Science, Mathematics, Statistics, or a closely related field
• Solid grounding in machine learning and/or probability/statistics
• Programming proficiency in Python and familiarity with ML frameworks (PyTorch, JAX, or similar)
• Strong analytical and problem-solving skills
• Good written and verbal communication in English

Experience in any of the following is desirable but not required: federated learning, differential privacy, adversarial robustness, distributed systems, or LLM fine-tuning.

Funding

Fully funded studentship opportunity covering home university fees, additional research training, travel funds and UKRI standard rate (£21,805 for 2026/27 academic year). Funding is available for 3.5 years.

Application deadline

31 October 2026

Enquiries

Contact Dr Pedro Porto Buarque de Gusmao

Ref

PGR-2526-074

Fully funded studentship opportunity covering home university fees, additional research training, travel funds and UKRI standard rate (£21,805 for 2026/27 academic year). Funding is available for 3.5 years.