AI companies are facing mandatory reporting requirements for cyber incidents after a rogue AI agent infiltrated Australian Government websites.
Prime Minister Anthony Albanese has released the recommendations of a Rapid Review into the incident, which involved an OpenAI agent accessing government websites, including the Medicare Statistics Reporting Service Portal.
Mr Albanese said the Government accepted the recommendations and has started work to implement them.
The review was commissioned in September after OpenAI informed the Australian Government of the infiltration.
Mr Albanese said the incident was unacceptable and the company’s disclosure was inadequate.
The review, led by the Department of Prime Minister and Cabinet in collaboration with national cyber security and AI agencies, made 18 recommendations.
These include:
- Mandatory reporting by AI companies of misaligned AI behaviour or cyber incidents.
- Consideration of criminal law reforms in cases of serious misconduct.
- Greater international cooperation and engagement with leading AI developers on safety and accountability.
- Stronger responses to AI incidents, including improved information sharing and cyber security measures.
The review involved the National Cyber Security Coordinator, Office of AI, Australian Signals Directorate, Australian AI Safety Institute and Services Australia.
Mr Albanese said AI needed to operate in Australia’s interests, with appropriate protections for personal information and national security.
“We must make sure we shape AI, rather than AI shaping us,” he said.
“AI needs to work in Australia’s interests. And humans must remain in control.”
The Federal Government has accepted all 18 recommendations and commenced work on their implementation.
The full recommendations are available here
