OpenAI backs Singapore’s call for AI incident transparency

Singapore have asked major AI companies for full and immediate transparency on AI incidents following the breach of the Australian national healthcare database.

Published Oct 15, 2026, 03:54 PM

Updated Oct 15, 2026, 03:54 PM

SINGAPORE – OpenAI has answered Singapore’s call for full transparency on artificial intelligence incidents and promised to immediately alert affected government agencies and organisations here once it is confident an incident has occurred.

The San Francisco-headquartered AI lab, however, did not commit to any notification timeline.

“ What we do right now is when we identify (incidents), and when we’re confident that we’ve identified something, we then immediately reach out to that entity ,” said OpenAI chief global affairs officer Chris Lehane in a virtual media conference on Oct 15.

“We are waiting to see if the Singapore Government is going to put an actual timeline on that,” Lehane added.

He said that it will work closely with the Singapore authorities on what information disclosure is needed and how to support that.

He was answering calls by Singapore for greater transparency after an OpenAI agent breached an Australian government health statistics portal.

Senior Minister K. Shanmugam, who is Coordinating Minister for National Security and Minister for Home Affairs, said on Oct 13 that Singapore and other countries had asked major AI firms to share details of incidents immediately, so governments could understand what happened in real time.

The Australian breach occurred in June, when an OpenAI agent gained unauthorised access to public and non-public files on the Medicare statistics reporting service portal. But the Australian government was notified only on Sept 10, through an e-mail to a public mailbox.

Australian Prime Minister Anthony Albanese criticised both the delay and the manner of notification, saying he had expressed Australia’s “extreme concern” to OpenAI chief executive Sam Altman.

The Australia breach was discovered during a retrospective review following a separate incident in July, when OpenAI models escaped their controlled testing environment and compromised systems belonging to AI platform Hugging Face.

Lehane said that review involved sifting through 50 petabytes of data, with AI flagging material for humans to examine.

But he acknowledged that OpenAI should have raised the alarm sooner. The firm identified the Australian incident in August before alerting the Australian authorities in early September.

“We’ve acknowledged that we should have been a lot faster and a lot quicker on that,” said Lehane.

The company is now working with the Australian government to develop specific recommendations for formal reporting protocols.

Lehane said the experience underscored the need to establish norms for reporting AI incidents, similar to today’s standards for reporting software vulnerabilities.

OpenAI supported developing such rules through legislation or regulation, ultimately working towards international standards. While governments should determine their own notification deadlines, he said a common set of standards would benefit the world.

This is because countries could have different expectations about how much investigation should take place before they were alerted.

“In some cases, people want us to do a really deep analysis and then come to them. And in some cases, people just want to know as soon as we know,” he said.

For findings from its ongoing retrospective review, OpenAI leaves affected organisations to decide whether they wish to be publicly named. Otherwise, it publishes a general account of what it discovered and the action taken, added Lehane.

Governments are also seeking access to frontier AI models for safety testing. The US and Britain have arrangements to evaluate models before public release.

American AI developer Anthropic, which opened its Singapore office on Oct 14, signed an agreement with the Government covering technical exchanges on model evaluation, testing standards and incident response.

However, this does not give Singapore priority access to unreleased models. Instead, Singapore organisations can apply to join Anthropic’s cyberverification programme to access the latest launched models for internal cybersecurity testing.

Similarly, OpenAI’s Daybreak allows vetted organisations here to use its launched frontier AI models for software development and defensive tasks.

Lehane said OpenAI is working to expand Daybreak access to selected Singapore government agencies.

The company has an existing $300 million commitment to Singapore, which focuses largely on AI adoption through an applied AI lab, but also includes discussions on developing governance and AI safety partnerships in the region.

OpenAI has contributed to Singapore’s Model AI Governance Framework, which guides responsible AI development and use, and the Singapore Consensus, which sets out global AI safety research priorities.

AI/artificial intelligence

Artificial Intelligence

在澳大利亚国家医疗保健数据库遭到入侵后，新加坡要求主要的人工智能公司全面、立即公开人工智能事件的相关信息。

发布于 2026 年 10 月 15 日下午 3:54

更新于2026年10月15日下午3:54

新加坡——OpenAI响应了新加坡要求人工智能事件完全透明的呼吁，承诺一旦确信发生事件，将立即通知受影响的政府机构和组织。

然而，这家总部位于旧金山的人工智能实验室并未承诺任何通知时间表。

OpenAI 首席全球事务官克里斯·莱恩在 10 月 15 日的虚拟媒体会议上表示：“我们现在的做法是，当我们发现（事件）并且确信我们已经发现了某些事情时，我们会立即与该实体联系。”

“我们正在等待新加坡政府是否会就此设定一个具体的时间表，”莱恩补充道。

他表示，将与新加坡当局密切合作，确定需要披露哪些信息以及如何支持这些信息披露。

在 OpenAI 的一个代理程序入侵澳大利亚政府的健康统计门户网站后，新加坡呼吁提高透明度，他当时正在回应这一呼吁。

国家安全统筹部长兼内政部长尚穆根高级部长于10月13日表示，新加坡和其他国家已要求主要人工智能公司立即分享事件详情，以便各国政府能够实时了解发生了什么。

澳大利亚的数据泄露事件发生在6月份，当时OpenAI的一个代理程序未经授权访问了Medicare统计报告服务门户网站上的公共和非公共文件。但澳大利亚政府直到9月10日才收到通知，通知是通过发送到公共邮箱的电子邮件发出的。

澳大利亚总理安东尼·阿尔巴尼斯批评了通知的延迟和方式，并表示他已向 OpenAI 首席执行官萨姆·奥特曼表达了澳大利亚的“极度关切”。

澳大利亚的这次安全漏洞是在对 7 月份发生的另一起事件进行回顾性审查时发现的。当时，OpenAI 模型逃逸出了受控的测试环境，并破坏了人工智能平台 Hugging Face 的系统。

莱恩表示，审查工作涉及筛选 50 PB 的数据，人工智能会标记出需要人工检查的材料。

但他承认，OpenAI本应更早发出警报。该公司在8月份发现了澳大利亚发生的这起事件，但直到9月初才通知澳大利亚当局。

“我们已经承认，我们本应该更快、更迅速地完成这件事，”莱恩说。

该公司目前正与澳大利亚政府合作，制定正式报告规程的具体建议。

莱恩表示，这次经历凸显了建立人工智能事件报告规范的必要性，类似于目前软件漏洞报告的标准。

OpenAI支持通过立法或监管来制定此类规则，最终目标是达成国际标准。他表示，虽然各国政府应自行决定通知期限，但一套通用标准将造福世界。

这是因为各国对于在接到警报前应该进行多少调查可能有不同的预期。

他说：“有些情况下，人们希望我们进行非常深入的分析，然后再告诉他们。而有些情况下，人们只是希望我们一知道结果就立刻知道。”

莱恩补充说，对于正在进行的回顾性审查结果，OpenAI 让受影响的组织自行决定是否公开其名称。否则，OpenAI 将发布一份关于其发现和已采取的行动的总体说明。

各国政府也在寻求获取前沿人工智能模型进行安全测试。美国和英国已达成协议，在模型公开发布前对其进行评估。

美国人工智能开发商 Anthropic 于 10 月 14 日在新加坡开设了办事处，并与新加坡政府签署了一项协议，涵盖模型评估、测试标准和事件响应方面的技术交流。

然而，这并不意味着新加坡可以优先获得未发布的模型。相反，新加坡的机构可以申请加入Anthropic的网络安全验证计划，以获取最新发布的模型进行内部网络安全测试。

同样，OpenAI 的 Daybreak 允许经过审核的组织使用其推出的前沿 AI 模型进行软件开发和防御任务。

Lehane表示，OpenAI正在努力扩大Daybreak对部分新加坡政府机构的访问权限。

该公司目前已向新加坡投入 3 亿美元，主要侧重于通过应用人工智能实验室推广人工智能，但也包括探讨在该地区发展治理和人工智能安全合作伙伴关系。

OpenAI 为新加坡的《人工智能治理框架模型》（指导负责任的人工智能开发和使用）和《新加坡共识》（制定全球人工智能安全研究优先事项）做出了贡献。

人工智能

人工智能