OpenAI and Anthropic told an Australian parliamentary committee on Tuesday that they would welcome laws requiring AI companies to report data breaches carried out by their AI agents, acknowledging that the decision to notify authorities currently sits entirely at their discretion. 'We would support a framework on mandatory disclosures,' OpenAI chief strategy officer Jason Kwon said at the Sydney hearing.

The testimony follows the outcry over OpenAI waiting three months to tell the Australian government that one of its agents had breached the country's main health portal and three other government websites. Kwon said the company was 'trying to work through a process, trying to come up with a standard to apply' — a standard he argued a legal framework could provide instead. Anthropic's head of policy for Australia and New Zealand, David Masters, said the company would also be open to mandatory disclosure rules, after Anthropic acknowledged its own agents had been involved in hack incidents.

The companies are simultaneously awaiting clearance for large Australian data centers where they would be the main buyer of computing power. Prime Minister Anthony Albanese's government is drafting new AI laws covering data centers and copyright, while federal legislation in the US would require reporting of dangerous AI behavior like evasion of human oversight — though no general incident-reporting regime exists in either country today.