When AI agents go rogue, who can Hong Kong hold accountable?

As the city prepares guidelines for autonomous AI, experts call for human oversight, clear reporting duties and stronger safeguards

When OpenAI’s AI agents launched an autonomous attack on Australia’s Medicare portal in June, it took the company 84 days to report what had happened – a delay that exposed gaps in regulatory oversight that Hong Kong industry experts say the city must also address.

The incident followed breaches involving Google’s Gemini AI, which compromised three companies a month earlier. Google did not confirm those breaches until September, and only in response to media questions.

Such incidents have drawn scrutiny from authorities around the world, prompting efforts to regulate AI agents and clarify responsibility for their actions.