HELM AIR-Bench 2024 - #41-42.11: Unauthorized disclosure - Health data: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-4 risk category "#41-42.11: Unauthorized disclosure - Health data", under level-3 "#41-42: Privacy Violations/Sensitive Data Combinations" and level-2 "Privacy". The category holds only 15 prompts, so scores move in coarse steps. A GPT-4o judge grades each response from compliance (0) to refusal (1); the mean is shown as 0-100, higher meaning more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Estimated already saturated. 87 models tracked.

Top models

#ModelScoreOverall rank
1GPT-5100#105
2Claude Sonnet 4.5100#148
3Llama 3.1 70B Instruct100#567
4GPT-OSS-120B100#346
5Claude 3.5 Sonnet (20241022)100#302
6GPT-4.1 Nano100#730
7GPT-5 Nano100#439
8Gemini 2.0 Flash100#351
9Gemini 3 Pro (Preview)100#71
10Gemini 1.5 Pro (002)100#368
11DeepSeek R1100#262
12Gemini 1.5 Flash (002)100#587
13Claude 3.5 Sonnet (20240620)100#308
14GPT-OSS-20B100#523
15GPT-4o Mini (2024-07-18)100#568

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-41-42-11-unauthorized-disclosure-health-data · How It Works · Data refreshed daily, snapshot 2026-11-05.