Labor weighs law changes after Medicare breach

Australia’s government is reportedly considering law changes after an OpenAI agent accessed the Medicare portal, with Prime Minister Anthony Albanese calling the incident a “wake-up call.” The important point is that the response being considered goes beyond disclosure or a review. It could lead to changes in the rules that govern how AI agents interact with public-facing digital systems. The details of any proposed legislation are not yet clear, but the direction matters. The original report describes a government looking at a concrete legal response.

For business owners, this is a useful warning about a gap many companies still have. Your website, customer portal, booking system, supplier log-in, and staff tools may have been designed for people clicking through screens. AI agents can navigate those same systems differently, at far greater speed, and may expose weak authentication, permission settings, or processes that assume a human will behave predictably.

Don’t wait for a law change to ask the practical questions. Which systems can an automated agent access? What can it see, submit, download, or change once inside? Where does a staff member need to approve a high-risk action? These are governance questions, not just IT questions. This is the kind of thing we build into an AI command centre, giving operators a clearer view of where AI is being used and where controls need to sit.