RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) and small language models (SLMs) are being adopted at remarkable speed, although their safety still remains a serious concern. With the advent of multilingual S/LLMs, the question now becomes a matter of scale: can we expand multilingual safety evaluations of these models with the same velocity at which they are deployed? To this end, we introduce RTP-LX, a human-transcreated and human-annotated corpus of toxic prompts and outputs in 28 languages. RTP-LX follows participatory design practices, and a portion of the corpus is especially designed to detect culturally-specific toxic language. We evaluate 10 S/LLMs on their ability to detect toxic content in a culturally-sensitive, multilingual scenario. We find that, although they typically score acceptably in terms of accuracy, they have low agreement with human judges when scoring holistically the toxicity of a prompt; and have difficulty discerning harm in context-dependent scenarios, particularly with subtle-yet-harmful content (e.g. microaggressions, bias). We release this dataset to contribute to further reduce harmful uses of these models and improve their safe deployment.
Key facts. Cited by 34 papers in the map (data through 7 Oct 2026). Builds on 24 of its 31 references that are in the map. First posted on arXiv 22 Apr 2024.
Builds on
24 of 31 references.
References · 24
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2022No Language Left Behind: Scaling Human-Centered Machine Translationcited by 1,290
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2019Racial Bias in Hate Speech and Abusive Language Detection Datasetscited by 208
- 2023ChatGPT Beyond English: Towards a Comprehensive Evaluation of Large Language Models in Multilingual Learningcited by 203
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2020Hate Speech Detection and Racial Bias Mitigation in Social Media based on BERT modelcited by 87
12 more
- 2023Are Large Language Model-based Evaluators the Solution to Scaling Up Multilingual Evaluation?cited by 87
- 2023MEGAVERSE: Benchmarking Large Language Models Across Languages, Modalities, Models and Taskscited by 57
- 2022Characteristics of Harmful Text: Towards Rigorous Benchmarking of Language Modelscited by 49
- 2019Offensive Language and Hate Speech Detection for Danishcited by 48
- 2020Multi-task Learning for Multilingual Neural Machine Translationcited by 46
- 2020Toxic Language Detection in Social Media for Brazilian Portuguese: New Dataset and Multilingual Analysiscited by 45
- 2020BEEP! Korean Corpus of Online News Comments for Toxic Speech Detectioncited by 39
- 2024Evaluating the Elementary Multilingual Capabilities of Large Language Models with MultiQcited by 27
- 2023An Evaluation on Large Language Model Outputs: Discourse and Memorizationcited by 20
- 2024Rethinking Generative Large Language Model Evaluation for Semantic Comprehensioncited by 13
- 2023Comprehensive Evaluation of ChatGPT Reliability Through Multilingual Inquiriescited by 11
- 2023Offensive Hebrew Corpus and Detection using BERTcited by 6
Built on by
Citing papers per year: 2024: 13; 2025: 16; 2026: 5.
34 papers.
Sort:
By area:
- 2025Qwen3Guard Technical Reportcited by 125
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2024Survey of Cultural Awareness in Language Models: Text and Beyondcited by 101
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
- 2024PARIKSHA: A Large-Scale Investigation of Human-LLM Evaluator Agreement on Multilingual and Multi-Cultural Datacited by 37
- 2024Phi-3 Safety Post-Training: Aligning Language Models with a "Break-Fix" Cyclecited by 32
- 2024Preference Tuning For Toxicity Mitigation Generalizes Across Languagescited by 31
- 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applicationscited by 24
- 2025LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Modelscited by 21
- 2024Multilingual Large Language Models: A Systematic Surveycited by 18
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lenscited by 18
- 2024Arabic Dataset for LLM Safeguard Evaluationcited by 17
22 more
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 16
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 13
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safetycited by 9
- 2024DeMod: A Holistic Tool with Explainable Detection and Personalized Modification for Toxicity Censorshipcited by 6
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistenciescited by 6
- 2024Awes, Laws, and Flaws From Today's LLM Researchcited by 5
- 2024Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigationcited by 5
- 2025Aligned Probing: Relating Toxic Behavior and Model Internalscited by 5
- 2025ToxicTone: A Mandarin Audio Dataset Annotated for Toxicity and Toxic Utterance Tonalitycited by 5
- 2025The Thin Line Between Comprehension and Persuasion in LLMscited by 5
- 2025Massively Multilingual Adaptation of Large Language Models Using Bilingual Translation Datacited by 4
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxificationcited by 3
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detectioncited by 3
- 2026LASA: Language-Agnostic Semantic Alignment at the Semantic Bottleneck for LLM Safetycited by 3
- 2025Qorgau: Evaluating LLM Safety in Kazakh-Russian Bilingual Contextscited by 2
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gapscited by 2
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfercited by 2
- 2024If Eleanor Rigby Had Met ChatGPT: A Study on Loneliness in a Post-LLM Worldcited by 1
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMscited by 1
- 2026Shieldstralcited by 1
- 2026Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Contentcited by 0
- 2026ArabicDialectSafety: A Dialect-Aware Benchmark for Arabic Content Safety Classificationcited by 0
- 2026ArabicDialectSafety: A Dialect-Aware Benchmark for Arabic Content Safety Classification2 Aug 2026
- 2026Shieldstral28 Jul 2026
- 2026Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Content28 May 2026
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs1 May 2026
- 2026LASA: Language-Agnostic Semantic Alignment at the Semantic Bottleneck for LLM Safety13 Apr 2026
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer2 Dec 2025
- 2025Qwen3Guard Technical Report16 Oct 2025
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection15 Aug 2025
- 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications3 Aug 2025
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps8 Jul 2025
- 2025The Thin Line Between Comprehension and Persuasion in LLMs2 Jul 2025
- 2025Massively Multilingual Adaptation of Large Language Models Using Bilingual Translation Data31 May 2025
22 more
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025ToxicTone: A Mandarin Audio Dataset Annotated for Toxicity and Toxic Utterance Tonality21 May 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety21 Apr 2025
- 2025LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Models14 Apr 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025
- 2025Aligned Probing: Relating Toxic Behavior and Model Internals17 Mar 2025
- 2025Qorgau: Evaluating LLM Safety in Kazakh-Russian Bilingual Contexts19 Feb 2025
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lens7 Feb 2025
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies19 Dec 2024
- 2024Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigation18 Dec 2024
- 2024If Eleanor Rigby Had Met ChatGPT: A Study on Loneliness in a Post-LLM World2 Dec 2024
- 2024Multilingual Large Language Models: A Systematic Survey17 Nov 2024
- 2024DeMod: A Holistic Tool with Explainable Detection and Personalized Modification for Toxicity Censorship4 Nov 2024
- 2024Survey of Cultural Awareness in Language Models: Text and Beyond30 Oct 2024
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicity29 Oct 2024
- 2024Arabic Dataset for LLM Safeguard Evaluation22 Oct 2024
- 2024Awes, Laws, and Flaws From Today's LLM Research27 Aug 2024
- 2024Phi-3 Safety Post-Training: Aligning Language Models with a "Break-Fix" Cycle18 Jul 2024
- 2024Preference Tuning For Toxicity Mitigation Generalizes Across Languages23 Jun 2024
- 2024PARIKSHA: A Large-Scale Investigation of Human-LLM Evaluator Agreement on Multilingual and Multi-Cultural Data21 Jun 2024
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Models15 May 2024
- 2025Qwen3Guard Technical Reportcited by 125
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lenscited by 18
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 13
- 2025Qorgau: Evaluating LLM Safety in Kazakh-Russian Bilingual Contextscited by 2
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gapscited by 2
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfercited by 2
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMscited by 1
- 2026Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Contentcited by 0
- 2026Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Content28 May 2026
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs1 May 2026
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer2 Dec 2025
- 2025Qwen3Guard Technical Report16 Oct 2025
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps8 Jul 2025
- 2025Qorgau: Evaluating LLM Safety in Kazakh-Russian Bilingual Contexts19 Feb 2025
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lens7 Feb 2025
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicity29 Oct 2024
- 2024Survey of Cultural Awareness in Language Models: Text and Beyondcited by 101
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
- 2024PARIKSHA: A Large-Scale Investigation of Human-LLM Evaluator Agreement on Multilingual and Multi-Cultural Datacited by 37
- 2025LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Modelscited by 21
- 2024Multilingual Large Language Models: A Systematic Surveycited by 18
- 2024Arabic Dataset for LLM Safeguard Evaluationcited by 17
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 16
- 2024DeMod: A Holistic Tool with Explainable Detection and Personalized Modification for Toxicity Censorshipcited by 6
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistenciescited by 6
- 2024Awes, Laws, and Flaws From Today's LLM Researchcited by 5
- 2024Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigationcited by 5
- 2025Aligned Probing: Relating Toxic Behavior and Model Internalscited by 5
12 most cited of 20 All 20 (JSON)
- 2026ArabicDialectSafety: A Dialect-Aware Benchmark for Arabic Content Safety Classification2 Aug 2026
- 2026Shieldstral28 Jul 2026
- 2025ToxiFrench: Benchmarking and Enhancing Language Models via CoT Fine-Tuning for French Toxicity Detection15 Aug 2025
- 2025The Thin Line Between Comprehension and Persuasion in LLMs2 Jul 2025
- 2025Massively Multilingual Adaptation of Large Language Models Using Bilingual Translation Data31 May 2025
- 2025Breaking mBad! Supervised Fine-tuning for Cross-Lingual Detoxification22 May 2025
- 2025ToxicTone: A Mandarin Audio Dataset Annotated for Toxicity and Toxic Utterance Tonality21 May 2025
- 2025LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Models14 Apr 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025
- 2025Aligned Probing: Relating Toxic Behavior and Model Internals17 Mar 2025
- 2024LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies19 Dec 2024
- 2024Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigation18 Dec 2024
12 newest of 20 All 20 (JSON)