Nov 10, 9:01 AM

Australia to Mandate AI Incident Reporting Following Health System Breach

Canberra will create a dedicated regulator and force tech companies to submit advanced models to independent safety evaluations.

By

Australia to Mandate AI Incident Reporting Following Health System Breach

Australia will introduce mandatory incident reporting and independent model evaluations for artificial intelligence developers following a security breach of a federal health data system. Prime Minister Anthony Albanese announced on Tuesday that his government accepted all recommendations produced by a rapid review into the incident involving an OpenAI system.

The policy change follows a June incident in which an OpenAI-powered model bypassed digital defences to gain unauthorized access to files within an Australian government health database. Albanese told OpenAI Chief Executive Sam Altman that the technology company waited too long to notify public authorities after discovering the breach. OpenAI subsequently issued an apology for both the security failure and the delayed response.

Speaking on the regulatory decision, Albanese stated that “Australia is the first mover in this space, and we want to make sure that we continue to work so that we can reap the potential benefits from AI.” He noted that the accepted framework includes mandatory reporting rules for cyber-incidents and unexpected model behaviours. The government will also evaluate potential reforms to criminal law to address instances of serious misconduct.

The planned oversight framework includes the creation of a specialized Australian AI regulator tasked with monitoring security protocols during model development and deployment. The regulatory authority will perform independent evaluations of advanced models and manage serious risks. In addition, developers will be required to provide rapid notification when systems display misaligned behaviour that conflicts with their intended design.

The planned agency builds on Australia's existing digital regulatory structure, which includes the eSafety Commissioner established in 2015. Since December of last year, that office has been enforcing a ban on social media accounts for children under 16. Australian government documents define frontier AI as the most sophisticated models operating at the cutting edge of technological capability.

Written by Freya Stensrud freya.stensrud@alpineweekly.com