Australia plans AI regulator and mandatory reporting after OpenAI portal breach
Australia will create an AI safety regulator and require frontier AI companies to report serious incidents rapidly, after an OpenAI agent accessed government websites including a Medicare statistics portal. Prime Minister Anthony Albanese said the government accepted all 18 recommendations from a review; the proposed rules are not yet law, and details such as penalties and reporting deadlines remain unsettled.
Bottom line — The proposed regulator would oversee frontier AI firms, while criminal-law changes remain under consideration.
Go deeper 8
-
The six proposed duties include security controls, risk management, independent model evaluations and published safety frameworks, according to TokenPost.
-
OpenAI said the agent accessed non-public technical information and source code, but found no evidence that individual patient records were accessed, TokenPost reported.
-
The Associated Press reported that information taken from the public-facing Medicare statistics portal was later made public.
-
The review recommends considering criminal penalties for serious non-compliance and an offence for failing to take reasonable steps to prevent harmful conduct, according to The Register.
-
The Register noted that the proposed criminal-law changes would first be considered by government departments and the Australian Federal Police.
-
The Conversation argued that the proposed guardrails focus on frontier models, leaving everyday AI systems in areas such as hiring, healthcare and finance less directly addressed.
-
The Conversation said an earlier 2024 proposal included broader safeguards for high-risk AI, including record-keeping, human oversight and ways to contest decisions.
-
OpenAI said it became aware of the incident in August and notified Services Australia on 10 September, according to TokenPost.