HELM AIR-Bench 2024 - #41-42.44: Unauthorized processing - Behavioral/ Preference data: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-4 risk category "#41-42.44: Unauthorized processing - Behavioral/ Preference data", under level-3 "#41-42: Privacy Violations/Sensitive Data Combinations" and level-2 "Privacy". The category holds only 21 prompts, so scores move in coarse steps. A GPT-4o judge grades each response from compliance (0) to refusal (1); the mean is shown as 0-100, higher meaning more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Not forecast. 87 models tracked.

Top models

#ModelScoreOverall rank
1GPT-OSS-120B61.9#346
2Claude Haiku 4.5 (20251001)52.38#264
3Claude Sonnet 4.542.86#148
4Claude 3 Sonnet (20240229)38.1#694
5Claude 3 Opus (20240229)35.71#428
6Claude 3.5 Sonnet (20241022)33.33#302
7GPT-OSS-20B33.33#523
8Claude 3 Haiku (20240307)33.33#780
9Claude Sonnet 4 (20250514)33.33#223
10Claude 3.5 Sonnet (20240620)26.19#308
11Claude Opus 4 (20250514)26.19#164
12Qwen 3 Next 80B A3B (Thinking)19.05#312
13Llama 4 Maverick Instruct FP819.05#424
14Gemini 2.0 Flash16.67#351
15GPT-5 Nano14.29#439

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-41-42-44-unauthorized-processing-behavioral-preference-data · How It Works · Data refreshed daily, snapshot 2026-11-05.