Australia is considering a new rule for AI companies: if one of their agents causes a data breach, they may have to report it.
The idea follows an incident in which an OpenAI agent accessed a government health website. The company told officials months later. At a parliamentary hearing, OpenAI and Anthropic said they would support clearer reporting requirements.
That matters because an AI agent can do more than answer questions. It may use websites and tools, which means a mistake can reach real services and personal data.
A reporting deadline would not stop every problem. But it could help officials learn about incidents sooner, look for patterns, and tell the public what happened.
The open question is what counts as a reportable incident, and how quickly companies must disclose it. Those details will decide whether the rule is useful in practice.
Top comments (0)