Australian Prime Minister Anthony Albanese described the infiltration of the national healthcare system Medicare database by an OpenAI artificial intelligence bot as "unacceptable".
Stating that the government is evaluating the steps that can be taken at the law enforcement and legal regulatory level, Albanese noted that he directly conveyed his deep concern about the issue to OpenAI CEO Sam Altman.
The cyber leak, which occurred in June and was made public by OpenAI in September, sparked political and diplomatic debates ahead of artificial intelligence-specific legal regulations that the Canberra administration plans to put into effect from 2027.
Technology policy experts point out that the government may take tougher measures against companies following this unauthorized access to one of the country's most heavily used public institutions.
Within the scope of the new legal regulations, it is envisaged that a mandatory notification requirement will be imposed on relevant technology companies when artificial intelligence products are involved in security violations.
Current cyber legislation in Australia requires companies to report security breaches to authorities within 72 hours.
On the other hand, experts emphasize that privacy laws may be updated after the Medicare incident, and it may become mandatory for companies to report violations to official authorities and contribute to the testing of public websites in order to protect national security.
OpenAI, on the other hand, claimed that it detected this access, which was one of at least four leaks to Australian government websites, in August.
The company maintained that the action was not intentional and that no personal information was compromised.
Australia has already rejected requests from OpenAI and rival Anthropic by not allowing AI models to be trained with copyrighted domestic content without permission.
The Canberra administration requires the platforms in question to enter into direct licensing agreements with Australian rights holders.
Australia's moves add pressure to relations with the Trump administration, which were already strained by the social media ban on under-16s and the imposition of fees on platforms that publish Australian news content.
The Washington administration has previously described Canberra's attempts to ensure user security and introduce the right to disable algorithms as "censorship".
Australia, which conducts two separate official investigations at the federal level and two at the state level; It plans federal rules that would ban data centers from generating their own energy, limiting water use, and using local content for data training without payment.
Speaking to the Reuters agency, Johanna Weaver, Director of the Tech Policy Design Institute and Australia's former United Nations cyber negotiator, stated that Australia is in a position to lead the creation of global security standards in artificial intelligence, with its history of monitoring the technology sector, despite US resistance.
Henry Fraser, a technology law researcher from Queensland University of Technology, stated that local public concerns encouraged the government to take steps despite possible reactions from the United States.
The breach of the Medicare database also directly affects the massive data center investments that economists estimate will reach 150 billion Australian dollars (about 105 billion US dollars) by 2030.
When approving construction permits for these facilities, local planning authorities are taking the principle of "social approval", which represents the tangible benefit companies provide to society, into more strict consideration.
OpenAI's partnership with Australian company NextDC for a 612-megawatt facility in Sydney is awaiting final planning approval from New South Wales state authorities.
Following the Medicare disclosure, New South Wales Premier Chris Minns revealed that an OpenAI bot had also accessed the state's Bureau of Crime Statistics and Investigations research database.
The 2.16 gigawatt data center project, which artificial intelligence company Anthropic aims to implement with a local partner in Queensland, is also awaiting the approval of both the Foreign Investment Review Board and the state government.
New South Wales Green Party MP Abigail Boyd, who chairs the data centers review commission in the state, emphasized that the social harms caused by technologies should definitely be taken into account when granting construction permits for these hyperscale centers.
