Australia may make knowingly selling unsafe AI a crime

Canberra dangled that possibility yesterday when releasing the results of an investigation into OpenAI’s admission that its agents accessed non-public medical records – and that it didn’t disclose the incident for weeks. Security at the agency which held those records fell short of contemporary best practice but Canberra nonetheless ordered a rapid review into Australia’s ability to handle infosec incidents involving AI. That review landed yesterday, complete with 18 recommendations including one that would make it mandatory for AI companies to report misaligned behavior or security incidents involving their models, and perhaps impose criminal penalties for “egregious regulatory non-compliance.”