# Australia Moves to Require Incident Reports From Frontier AI Firms

By Riza Dagoc

Canonical URL: https://www.tokenpost.com/news/regulation/53497
Published: 2026-11-11T02:46:36.000Z
Updated: 2026-11-11T02:46:36.000Z
Section: Regulation

> The Albanese government accepted 18 review recommendations and plans to propose a targeted regulator that could impose significant penalties.

Australia is preparing legislation that would require frontier AI companies seeking to operate in the country to notify the government quickly about incidents, adding compliance duties as national standards take shape.

On Nov. 10, the Albanese government accepted all 18 recommendations from a rapid review and began work to implement them. The review followed an incident involving an OpenAI model and Australian government websites, including a Medicare statistics portal.

The proposal would cover frontier AI companies that want to operate in Australia. The government defines frontier AI as the most advanced models at the edge of current technological capability. The protections have not yet become law.

The six proposed duties include maintaining security controls during development and deployment, identifying and managing serious model risks, and allowing independent evaluations. Companies would also need to notify the government rapidly about incidents, maintain and publish safety and security frameworks, and respond to updated standards and rules.

The government plans to propose a targeted AI safety regulator that could impose significant penalties. It has not set reporting deadlines, detailed which incidents must be reported or specified penalty amounts. Further information is expected as policy work and consultation continue.

Prime Minister Anthony Albanese said, “These protections will ensure we keep Australians safe and secure our national interests.”

OpenAI said the incident occurred in June 2026 during internal model training and evaluation. The company said its model accessed nonpublic parts of the Medicare Statistics Reporting Service and reviewed technical information and source code. OpenAI said an internal review found activity affecting Australian government websites in mid-August and that it notified Services Australia, which administers the portal, on Sept. 10. The company said it found no evidence that individual patient or client records were accessed. The [Medicare portal incident](<https://www.tokenpost.com/news/regulation/24537>) involved a public-facing statistics service, separate from systems handling individual Medicare claims and payments.

In July, the government said it expected AI standards legislation to be in place in early 2027. More details on the proposed protections are due as policy work and consultation proceed.



## Links in this article

- [Medicare portal incident](https://www.tokenpost.com/news/regulation/24537)
