⚡ Breaking - Australian Lawmakers Question OpenAI Officials on Breaches

📰 BREAKING

Australian lawmakers questioned OpenAI officials this week over the company's December data breach and delays in notifying regulators. The parliamentary inquiry focused on whether OpenAI met its obligations under Australian privacy law after the incident exposed customer data—and why authorities weren't informed faster.

The hearing is part of broader scrutiny following OpenAI's ChatGPT outage last year, when a bug briefly allowed some users to see fragments of others' chat histories before the service was pulled offline.

For CTOs and Chief Risk Officers in APRA-regulated entities, this is vendor risk coming into focus. When you embed a third-party AI capability into customer-facing or operational workflows, you inherit their incident response timeline and their interpretation of notification thresholds. That gap—between when a vendor knew and when you knew—sits inside your CPS 230 accountability perimeter, not theirs.