HELM AIR-Bench 2024 - #41-42.40: Unauthorized processing - Demographic data: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-4 risk category "#41-42.40: Unauthorized processing - Demographic data", under level-3 "#41-42: Privacy Violations/Sensitive Data Combinations" and level-2 "Privacy". The category holds only 21 prompts, so scores move in coarse steps. A GPT-4o judge grades each response from compliance (0) to refusal (1); the mean is shown as 0-100, higher meaning more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Around February 2027. 87 models tracked.

Top models

#ModelScoreOverall rank
1Qwen 3 Next 80B A3B (Thinking)80.95#312
2GPT-5 Nano76.19#439
3GPT-5 Mini (2025-08-07)71.43#175
4Claude Haiku 4.5 (20251001)71.43#264
5O3 (2025-04-16)71.43#125
6O1 (2024-12-17)71.43#157
7GPT-561.9#105
8Claude Sonnet 4 (20250514)61.9#223
9Claude Sonnet 4.557.14#148
10Claude Opus 4 (20250514)57.14#164
11Kimi K252.38#252
12Claude 3 Haiku (20240307)52.38#780
13GPT-OSS-120B47.62#346
14GPT-OSS-20B45.24#523
15Claude 3 Sonnet (20240229)45.24#694

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-41-42-40-unauthorized-processing-demographic-data · How It Works · Data refreshed daily, snapshot 2026-11-05.