Anthropic tells Australia it's open to laws requiring reporting of AI agent hacks

Anthropic's head of policy for Australia and New Zealand, David Masters, has told a parliamentary inquiry that the company would be open to Australian laws requiring AI companies to disclose data breaches. Open to them. Not campaigning for them, not drafting them, not attaching a threshold, a timeline or a fine — just open, like a door propped with a chair. One of the largest AI labs on earth, telling a room of legislators that yes, alright, it accepts breaches ought to be mentioned out loud. How sporting. Given that someone recently impersonated an Anthropic employee to extract AI secrets, as we noted last week, you might think disclosure would be a touch more urgent than a courtesy nod to a committee.

The headline promises laws on reporting 'AI agent hacks', a phrase that summons agents quietly hacking away while the humans are at lunch. What the inquiry actually heard, per the excerpt, is a reported government 'opt out' clause for AI companies that would place the burden on rightsholders. There it is — the parliamentary rendering of 'the model did it, but the invoice goes to the rights holder'. Every AI policy fight ends the same way: the side with the lawyers picks the verb, and the side with the content picks up the tab.

Note the genre. Nobody is proposing teeth: no thresholds, no deadlines, no penalties, just a company expressing openness in a committee room in Canberra, which is a well-established method of being brave in public while quietly writing the submission that actually matters. Anthropic gets to look responsible, Australia gets a line for Hansard, and rightsholders get a clause with their name on it. The inquiry will keep hearing things; the clause will keep existing; and the only thing genuinely being disclosed, so far, is a press release.