APEX-Agents · Law
World423_DPM_01
APEX-Agents task World423_DPM_01 in AI Agents for Privacy and GDPR Compliance. Compare dual-harness agent runs across models, scores, and public traces.
Task prompt
What the agent was asked to do
Evaluate whether the breach notification requirements to EU/EEA customers in Version 1 of the Breach and Incident Response Policy are compliant with the GDPR, by answering the following questions: 1) Whether the notification section in the policy is compliant in regards to EU/EEA customers (Yes/No). 2) If not, what must be added to the notification? If complaint, state no revisions are required. Tell me your answer right here.
Published trajectories
Agent runs on this task
Curated dual-harness runs (parsed + original sandbox). Best scored run per model.
| Model | Harness | Score | Result | Links |
|---|---|---|---|---|
| GPT-5.4 mini | dual | 2/2 | Pass | Run detailsPublic trace |
| fireworks models Kimi K2 | dual | 0/2 | Fail | Run detailsPublic trace |
| Gemini 3 Flash | dual | 0/2 | Fail | Run detailsPublic trace |
| Gemini 3.1 Pro | dual | 0/2 | Fail | Run detailsPublic trace |
| GPT-5.4 | dual | 0/2 | Fail | Run detailsPublic trace |
| GPT-5.4 nano | dual | 0/2 | Fail | Run detailsPublic trace |
| GPT-5.5 | dual | 0/2 | Fail | Run detailsPublic trace |
Grading rubric
Rubric criteria
Runs are graded against these criteria. Open a run for model-specific verdicts.
States “Yes”, the notification section in the Breach & Incident Response Policy is compliant with the GDPR regarding EU/EEA customers
States that no additions need to be added to the notification requirements