Training Data Strategy

What Is Model Collapse, and How Do You Prevent It?

13 min read · 2026-06-17
2024the year Shumailov et al. formally defined and named model collapse
1%share of synthetic data in a training set shown sufficient to trigger measurable collapse
~50%of new web articles are now estimated to be AI-generated, up from about 10% pre-ChatGPT
17.3%of top Google search results were detected as AI-generated as of September 2025
Key takeaways
  • 1Model collapse is a documented, named research finding, not a metaphor: Shumailov et al. formally defined it in Nature in 2024 after showing it in language models, variational autoencoders, and Gaussian mixture models alike.
  • 2The damage compounds in two distinct stages: early collapse quietly erodes rare and minority-pattern data first, while aggregate metrics still look fine, and late collapse collapses the model's variance until output converges on a narrow, repetitive distribution.
  • 3Collapse doesn't require an all-synthetic dataset. A 2025 ICLR paper found that as little as 1% synthetic data mixed into an otherwise real training set was enough to produce measurable, persistent collapse.
  • 4The same research also found the fix: collapse occurs when synthetic data replaces real data across generations, but is avoided when synthetic data accumulates alongside a real dataset that never shrinks as a share of the whole.
  • 5The risk is rising because the training-data pool itself is getting more synthetic: independent studies put AI-generated content at roughly half of new web articles by 2025, up from about 10% before ChatGPT's public release, which makes provenance-tracked, verified human data an increasingly valuable anchor against collapse.
The short version

Model collapse is what happens when a machine learning model is trained, generation after generation, on data produced by earlier models instead of by humans. Each retraining cycle resamples an already-approximated distribution, so rare events and long-tail patterns quietly disappear first, and after enough generations the model converges toward a narrow, repetitive output distribution that has lost most of its resemblance to the real world. Ilia Shumailov and colleagues formalized the phenomenon in a 2024 Nature paper, and a 2025 follow-up showed that even 1% synthetic contamination in a training set is enough to trigger it. Full collapse (a total retrain on synthetic-only data) is rare in practice; partial degradation from blended synthetic-real corpora is the version that actually threatens production systems today, because so much of the public web is now AI-generated. The defense is not to avoid synthetic data entirely, but to track its provenance, keep a real, verified human-data anchor that never shrinks as a share of the corpus, and benchmark against held-out human data to catch drift before it compounds.

On this page ▾

What model collapse actually means

Model collapse is the degenerative process that occurs when a generative model is trained, generation after generation, on data produced by earlier models rather than by humans. Each new model is fit not to the true underlying distribution of human-generated content, but to a finite, imperfect sample of a previous model's output. That sample is missing information the previous model rarely produced in the first place, so the next model inherits a narrower version of reality, and the model trained after that inherits a narrower version still. Ilia Shumailov and co-authors formalized the term in a 2024 Nature paper after demonstrating the effect in large language models, variational autoencoders, and Gaussian mixture models alike. [4]

Use of model-generated content in training causes irreversible defects in the resulting models, where tails of the original content distribution disappear.
Shumailov, Shumaylov, Zhao, Papernot, Anderson & Gal: AI models collapse when trained on recursively generated data

The paper traces collapse to three compounding sources of error. Statistical approximation error comes from training on a finite sample: low-probability events are, by definition, unlikely to appear in any given sample, so each generation is slightly more likely to lose them. Functional expressivity error comes from the fact that no model architecture has infinite capacity to represent a true distribution exactly, so every model already introduces some distortion before recursion even begins. Functional approximation error comes from the learning procedure itself, gradient descent and its biases nudge the fitted distribution away from the target even under otherwise ideal conditions. None of these errors is fatal in isolation. Recursion is what turns them into a compounding spiral: each generation's distortion becomes the next generation's training signal.

Not the same as catastrophic forgetting or ordinary distribution shift
Catastrophic forgetting is a single model losing an old task while learning a new one. Distribution shift is a model facing different data at inference than it saw at training. Model collapse is neither: it is a multi-generation, self-referential feedback loop, where a model (or a lineage of models) is trained on outputs sampled from a model, and the errors accumulate across generations even when each individual training run looks unremarkable.

The research: from a 2023 preprint to a 2024 Nature paper, and what came after

Shumailov and colleagues first circulated the finding as a preprint in 2023 under the title "The Curse of Recursion: Training on Generated Data Makes Models Forget," then published the peer-reviewed version in Nature in July 2024 as "AI models collapse when trained on recursively generated data." [2] The paper describes two distinct stages. In early model collapse, the model begins losing information about the tails of the distribution, the rare, minority-pattern data, while aggregate performance metrics can still look stable, which is precisely what makes early collapse easy to miss in production monitoring. In late model collapse, the model has lost enough of its original variance that it confuses distinct concepts, converges on a small number of dominant modes, and its output bears little resemblance to the distribution it was originally meant to represent.

A 2025 paper accepted to ICLR pushed the finding further. Elvis Dohmatob and colleagues showed what they call strong model collapse: even the smallest fraction of synthetic data, as little as 1% of a training set, was sufficient to produce measurable, persistent degradation, and simply adding more total training data did not rescue performance once that contamination was present. [4] Their theoretical and empirical work also found that larger models can amplify collapse rather than resist it, which cuts against the common intuition that scale is always the model-quality equalizer.

Not every researcher frames the result the same way. A follow-up analysis by Ali Borji argues that collapse is best understood as a general statistical consequence of repeatedly resampling and refitting a distribution, a property of the math itself rather than a defect specific to transformer architectures or any single training recipe. [2] The distinction matters for prevention: if collapse is architecture-specific, better model design might solve it; if it is a property of resampling itself, the fix has to happen upstream, in what data actually goes into training, which is exactly where the mitigation section below focuses.

What collapsed output actually looks like

Collapse is easiest to understand as a progression rather than a single event. The table below summarizes how output characteristics shift across generations of recursive training, based on the pattern of degradation reported by Shumailov et al. and the follow-up literature. [2][4]

StageWhat's happening statisticallyWhat a reader or downstream system would notice
Generation 0 (healthy baseline)Model trained on real, human-generated data. Full distribution, including rare and unusual examples, is intact.Diverse, specific outputs; edge cases and minority patterns are represented at roughly their true real-world frequency.
Generation ~5 (early collapse)Rare events and long-tail patterns are underrepresented; variance has begun to narrow, but averages and headline benchmark scores can still look acceptable.Outputs feel slightly generic or repetitive on close inspection; minority classes, unusual phrasing, or niche factual detail start disappearing quietly.
Generation ~10 (late collapse)The fitted distribution has converged toward a small number of dominant modes; large portions of the original variance are gone.Outputs become noticeably repetitive or homogeneous, blur together distinct concepts, and can drift into confidently wrong or nonsensical territory.
A worked scenario: the support-bot refresh cycle
Consider a vendor that fine-tunes a customer-support model quarterly, and each quarter regenerates its training conversations by having the current model role-play both sides of new support chats rather than sourcing fresh human transcripts. After a few refresh cycles the bot's phrasing narrows to a handful of stock patterns, it stops handling the unusual tickets it used to resolve correctly, and its confidence on wrong answers doesn't drop, because the training signal it's now learning from is its own prior generation's confident output, not ground truth. This is the mechanism in miniature: no single retraining run looks broken, but the lineage degrades.

Why this matters more with every year that passes

Model collapse was a theoretical risk in 2023 and 2024. It is closer to an ambient condition of the training-data supply chain today, because so much of what any new web crawl scoops up is already AI-generated. An October 2025 study by Graphite, analyzing roughly 43,000 CommonCrawl URLs published between January 2020 and May 2025, found that AI-generated articles reached roughly half of new web content by late 2024, up from about 10% in the period before ChatGPT's public release. [2] A separate, ongoing tracking study by Originality.ai found that 17.31% of the top 20 results across 500 tracked search queries were AI-generated as of September 2025, lower than the raw-web figure but still a meaningful and rising share of exactly the pages most likely to be scraped for training corpora. [4]

Neither study proves that any specific frontier model has already collapsed; both are measuring the composition of the web, not model behavior. But they establish the precondition Shumailov's team warned about directly: any team scraping the open web today for training data is, without deliberate filtering, pulling in a meaningfully larger share of model-generated text than a team doing the same scrape in 2022. [2] Combined with Dohmatob et al.'s finding that 1% contamination is enough to matter, the arithmetic is not reassuring for teams that assume web scale alone will dilute the problem away. [4]

Full model collapse vs. partial degradation: the distinction that matters in practice

Most public discussion of model collapse describes the extreme case, a full retrain where an entire dataset is replaced with synthetic output across several generations and no real data survives in the loop. That scenario is real, it is what Shumailov et al. modeled directly, and it is genuinely catastrophic when it happens. [2] It is also relatively rare in production: almost no serious lab or vendor deliberately trains on 100% synthetic data with zero human anchor.

The version that actually threatens most production systems is partial degradation: a training corpus that is mostly real data with a growing minority of synthetic or model-influenced content mixed in, often without anyone tracking the ratio. This is the more common and more dangerous failure mode precisely because it is invisible by default. Dohmatob and colleagues' 1% finding applies here directly, a small, unmonitored synthetic share is enough to start the same compounding process, just more slowly and less obviously than a full synthetic-only retrain. [4] Distillation is a related, common vector for exactly this kind of partial contamination: training a smaller or cheaper model by imitating a larger proprietary model's outputs is a form of recursive training on model-generated data, and Shumailov's later work on imitation specifically found that distilled models come out less diverse and structurally less accurate than the model they were imitating. [6]

The core distinction
Full collapse asks: what happens if you train only on synthetic data for many generations. Partial degradation asks the more practically urgent question: what happens if your real training set has a small, growing, untracked synthetic contamination rate. Most teams should worry about the second question, not the first.

How to prevent and detect model collapse: a practical checklist

The research points to a consistent set of defenses. None of them requires abandoning synthetic data, which remains genuinely useful for coverage and scale; they require treating the real-to-synthetic ratio as a tracked, managed variable instead of an accident of whatever a scrape happens to contain.

  • Track data provenance end to end. Know, per record, whether it originated from a verified human source, a licensed dataset, or model generation, and preserve that metadata through every downstream transformation so it survives into the final training mix.
  • Maintain a human-data anchor that never shrinks as a share of the corpus. Gerstgrasser and colleagues showed the fix directly: collapse occurs when synthetic data replaces real data generation after generation, but is avoided when synthetic data accumulates alongside a real dataset whose proportion of the total doesn't decline over time. [4]
  • Adopt content provenance standards for anything you might later scrape or ingest. The C2PA Content Credentials standard, backed by Adobe, Amazon, BBC, Google, Meta, Microsoft, OpenAI, Sony, and TikTok among others, lets content be cryptographically signed with its origin and edit history, giving downstream data pipelines a machine-readable way to separate human-authored from AI-generated material. [4]
  • Treat watermarking and detection as a filter, not a guarantee. Detection classifiers and watermark checks can flag likely synthetic content before it enters a training pipeline, but a March 2026 industry review found real limits: metadata can be stripped, signing infrastructure can be compromised, and adoption across cameras, editors, and platforms remains fragmented enough that the industry is shifting toward provenance-by-default rather than relying on after-the-fact detection alone. [4]
  • Set and enforce an explicit synthetic-data ratio ceiling, rather than an implicit one set by whatever a scrape or vendor happens to deliver. Given that a 1% contamination rate has been shown sufficient to measurably degrade a model, ratios should be set deliberately and audited, not assumed to be negligible because they look small. [4]
  • Hold out a fixed, human-verified benchmark set and re-run it every training cycle. Because early collapse can leave aggregate metrics looking normal while tail performance quietly erodes, a static benchmark that specifically probes rare cases, minority classes, and long-tail factual detail is more diagnostic than a general eval score. [4]
  • Prefer licensed or verified proprietary human data over unfiltered public-web scrapes for anything that has to anchor model quality, since a scrape today carries a meaningfully higher share of AI-generated content than the same scrape carried in 2022. [4]
MitigationHow it worksMaturity as of 2026Cost to implement
Provenance tracking / metadata taggingTags each record's origin (human, licensed, synthetic) and preserves it through the pipelineEstablished internally at major labs; no universal external standard yetLow to moderate: mostly process and tooling discipline
Content provenance signing (C2PA)Cryptographically signs content with origin and edit history at creation timeReal but uneven adoption; strong on major platforms and some hardware, weak among smaller publishersModerate: requires publisher and tooling buy-in across the supply chain
AI-content detection / watermark checkingStatistical classifiers or embedded watermarks flag likely synthetic text before ingestionWidely available but explicitly limited; detection accuracy degrades as generators improveLow: mostly a filtering step, but requires ongoing recalibration
Real-data accumulation (never-shrinking anchor)Keeps synthetic data additive alongside a real corpus rather than replacing it generation over generationProven in controlled research settings; requires deliberate corpus governance to enforce in productionModerate to high: requires sustained sourcing of new real data
Held-out human benchmark evaluationRe-runs a fixed, human-verified test set every training cycle to catch tail-performance drift earlyStraightforward to implement; the limiting factor is discipline, not technologyLow: mainly ongoing evaluation infrastructure
Why verified human data is the load-bearing part of this list
Every mitigation above works better, and several of them only work at all, when there is a trustworthy, sufficiently large body of verified human-generated data to anchor against. Provenance tracking needs something reliably tagged as human to compare to. Detection needs a ground truth to validate its false-positive rate. Benchmarks need to be built from real, human-produced examples to be meaningful. That is the throughline from the research to the practical sourcing decision: the scarcer and more contaminated the open web becomes, the more a well-documented, consent-cleared proprietary dataset is worth as a defense, not just as training fuel.

Collapse is a data-supply-chain problem, and it's manageable

The right response to model collapse is discipline about composition, not avoidance of synthetic data altogether: know exactly what share of a training corpus is synthetic, where the rest of it came from, and whether that ratio is drifting upward without anyone deciding it should. The research is specific and actionable. Collapse compounds across generations when synthetic data replaces real data, small contamination rates matter more than intuition suggests, and the fix that has been demonstrated to work is keeping a real, human-generated anchor that accumulates rather than shrinks. [2][4]

As more of the public web fills with AI-generated content, the practical difficulty of finding, verifying, and maintaining that anchor is only going to grow. [2] Teams that treat provenance and human-data sourcing as a first-class engineering discipline now will be the ones whose models are still learning from reality several generations from today.

Anchor your training data in verified human sources.

Dayda lists proprietary, provenance-documented, human-generated datasets, exactly the kind of anchor the model-collapse research says matters. Browse vetted listings or talk to us about what your data is worth as a defense against collapse, not just as raw training volume.

Browse the Dayda marketplace