JMedEthicBench: A Multi-Turn Conversational Benchmark for Evaluating Medical Safety in Japanese Large Language Models

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Liu, Junyu, Li, Zirui, Niu, Qian, Zhang, Zequn, Xun, Yue, Hou, Wenlong, Wang, Shujun, Iwasawa, Yusuke, Matsuo, Yutaka, Hatakeyama-Sato, Kan
Natura: Preprint
Pubblicazione: 2026
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866917539512057856
author Liu, Junyu
Li, Zirui
Niu, Qian
Zhang, Zequn
Xun, Yue
Hou, Wenlong
Wang, Shujun
Iwasawa, Yusuke
Matsuo, Yutaka
Hatakeyama-Sato, Kan
author_facet Liu, Junyu
Li, Zirui
Niu, Qian
Zhang, Zequn
Xun, Yue
Hou, Wenlong
Wang, Shujun
Iwasawa, Yusuke
Matsuo, Yutaka
Hatakeyama-Sato, Kan
contents As Large Language Models (LLMs) are increasingly deployed in healthcare field, it becomes essential to carefully evaluate their medical safety before clinical use. However, existing safety benchmarks remain predominantly English-centric, and test with only single-turn prompts despite multi-turn clinical consultations. To address these gaps, we introduce JMedEthicBench, the first multi-turn conversational benchmark for evaluating medical safety of LLMs for Japanese healthcare. Our benchmark is based on 67 guidelines from the Japan Medical Association and contains over 50,000 adversarial conversations generated using seven automatically discovered jailbreak strategies. Using a dual-LLM scoring protocol, we evaluate 27 models and find that commercial models maintain robust safety while medical-specialized models exhibit increased vulnerability. Furthermore, safety scores decline significantly across conversation turns (median: 9.5 to 5.0, $p < 0.001$). Cross-lingual evaluation on both Japanese and English versions of our benchmark reveals that medical model vulnerabilities persist across languages, indicating inherent alignment limitations rather than language-specific factors. These findings suggest that domain-specific fine-tuning may accidentally weaken safety mechanisms and that multi-turn interactions represent a distinct threat surface requiring dedicated alignment strategies.
format Preprint
id arxiv_https___arxiv_org_abs_2601_01627
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle JMedEthicBench: A Multi-Turn Conversational Benchmark for Evaluating Medical Safety in Japanese Large Language Models
Liu, Junyu
Li, Zirui
Niu, Qian
Zhang, Zequn
Xun, Yue
Hou, Wenlong
Wang, Shujun
Iwasawa, Yusuke
Matsuo, Yutaka
Hatakeyama-Sato, Kan
Computation and Language
Artificial Intelligence
As Large Language Models (LLMs) are increasingly deployed in healthcare field, it becomes essential to carefully evaluate their medical safety before clinical use. However, existing safety benchmarks remain predominantly English-centric, and test with only single-turn prompts despite multi-turn clinical consultations. To address these gaps, we introduce JMedEthicBench, the first multi-turn conversational benchmark for evaluating medical safety of LLMs for Japanese healthcare. Our benchmark is based on 67 guidelines from the Japan Medical Association and contains over 50,000 adversarial conversations generated using seven automatically discovered jailbreak strategies. Using a dual-LLM scoring protocol, we evaluate 27 models and find that commercial models maintain robust safety while medical-specialized models exhibit increased vulnerability. Furthermore, safety scores decline significantly across conversation turns (median: 9.5 to 5.0, $p < 0.001$). Cross-lingual evaluation on both Japanese and English versions of our benchmark reveals that medical model vulnerabilities persist across languages, indicating inherent alignment limitations rather than language-specific factors. These findings suggest that domain-specific fine-tuning may accidentally weaken safety mechanisms and that multi-turn interactions represent a distinct threat surface requiring dedicated alignment strategies.
title JMedEthicBench: A Multi-Turn Conversational Benchmark for Evaluating Medical Safety in Japanese Large Language Models
topic Computation and Language
Artificial Intelligence
url https://arxiv.org/abs/2601.01627