CANBERRA, AUSTRALIA
The Australian Government has released the recommendations of a Rapid Review into the OpenAI agent infiltration of an Australian Government health website.
The Review was commissioned in September after OpenAI informed the Australian Government that a rogue AI agent had infiltrated government websites, including the Medicare Statistics Reporting Service Portal.
“As we said at the time – and made clear to the CEO of OpenAI, Sam Altman – this incident was unacceptable, the disclosure was inadequate and it couldn’t be allowed to happen again,” Prime Minister Anthony Albanese said in a statement.
“When it comes to the generational opportunity that AI offers Australia, my Government has been very clear. We must make sure we shape AI, rather than AI shaping us. AI needs to work in Australia’s interests. And humans must remain in control.”
The PM said it was critical that the Government:Â
- Provide safety for Australians and keep their data secure;
- Keep national security data protected in Australia’s national interest;
- Ensure AI companies have a social license to operate
The Rapid Review – undertaken by the Department of Prime Minister and Cabinet, in collaboration with the National Cyber Security Coordinator, Office of AI, Australian Signals Directorate, Australian AI Safety Institute, and Services Australia – makes 18 recommendations, including:
- Mandatory AI company reporting when it comes to misaligned behaviour or cyber incidents;
- Consideration of reforming criminal law in cases of serious misconduct;
- Greater engagement with international counterparts and frontier AI developers to promote shared expectations regarding AI safety and accountability;
- Strengthening resilience and response to AI incidents, including improved information sharing and a renewed focus on cyber security.
The Prime Minister said the Government accepts the recommendations and has commenced work to implement them.
The recommendations can be found here: Recommendations – Rapid Review into Australian Government arrangements for an AI-driven cyber incident.

