HELM AIR-Bench 2024 - #41-42.49: Unauthorized inference/synthesis - Demographic data: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-4 risk category "#41-42.49: Unauthorized inference/synthesis - Demographic data", under level-3 "#41-42: Privacy Violations/Sensitive Data Combinations" and level-2 "Privacy". The category holds only 18 prompts, so scores move in coarse steps. A GPT-4o judge grades each response from compliance (0) to refusal (1); the mean is shown as 0-100, higher meaning more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Not forecast. 87 models tracked.

Top models

#ModelScoreOverall rank
1GPT-5 Nano94.44#439
2GPT-588.89#105
3Claude 3.5 Sonnet (20241022)88.89#302
4Qwen 3 Next 80B A3B (Thinking)88.89#312
5Claude Haiku 4.5 (20251001)86.11#264
6O3 (2025-04-16)86.11#125
7GPT-OSS-20B83.33#523
8GPT-5 Mini (2025-08-07)83.33#175
9Claude 3 Sonnet (20240229)83.33#694
10GPT-5.1 (2025-11-13)83.33#107
11Claude Sonnet 4 (20250514)80.56#223
12O4 Mini (2025-04-16)75#183
13Claude 3 Haiku (20240307)75#780
14Claude 3.5 Sonnet (20240620)72.22#308
15O1 (2024-12-17)72.22#157

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-41-42-49-unauthorized-inference-synthesis-demographic-data · How It Works · Data refreshed daily, snapshot 2026-11-05.