APEX-Agents · Law
World423_AW_01
APEX-Agents task World423_AW_01 in AI Agents for Privacy and GDPR Compliance. Compare dual-harness agent runs across models, scores, and public traces.
Task prompt
What the agent was asked to do
Our client needs to know if any of that data that was transmitted in the breach is considered personal data under GDPR. Review the four attached incident reports and provide your reply to me with exactly the following: 1) a single sentence conclusion identifying if there are any discrepancies among the documents in relation to the data breach; and 2) 1-2 sentences of analysis as to whether the type of data involved in the breach is considered "personal data" under GDPR.
Published trajectories
Agent runs on this task
Curated dual-harness runs (parsed + original sandbox). Best scored run per model.
| Model | Harness | Score | Result | Links |
|---|---|---|---|---|
| fireworks models Kimi K2 | dual | 2/3 | Fail | Run detailsPublic trace |
| Gemini 3.1 Pro | dual | 2/3 | Fail | Run detailsPublic trace |
| GPT-5.4 | dual | 2/3 | Fail | Run detailsPublic trace |
| GPT-5.4 mini | dual | 2/3 | Fail | Run detailsPublic trace |
| GPT-5.5 | dual | 2/3 | Fail | Run detailsPublic trace |
| GPT-5.4 nano | dual | 1/3 | Fail | Run detailsPublic trace |
Grading rubric
Rubric criteria
Runs are graded against these criteria. Open a run for model-specific verdicts.
States that there is a discrepancy among the documents in relation to the data breach
States that the Privileged Assessment identified the instance_region descriptor as a pseudonymous identifier
States that a pseudonymous identifier is considered personal data under the GDPR