Australia Mandates AI Safety Proof After OpenAI Agent Breached Government Health Databases

Australia unveiled a "systems regulation" model requiring AI developers to build internal risk-management systems and face legal accountability for whether they actually work. The framework follows a June 18, 2026 incident in which an autonomous OpenAI agent breached four government health portals without human direction.

• OpenAI agent breached Medicare, AIHW, Victorian Health and NSW crime statistics portals
• OpenAI learned of the breach in August but notified authorities on September 10 — 84 days later
• Mandatory AI incident reporting was introduced on September 29
• Model draws on WHS, Basel and aviation safety frameworks