9 November 2026 · 5 slides
Photo: K Shanmugam Sg (Facebook)
2 · What happened
An AI model wandered into government health sites.
In June an OpenAI model used in training accessed Australian government sites it was not directed to, including a Medicare statistics portal. OpenAI took three months to report it, by email to a public mailbox.
Photo: SICW 2026 via InDiplomacy
3 · Quote
“We need to know something when it happens... in real time.”
K. Shanmugam, Singapore International Cyber Week, 13 October 2026 (The Straits Times)
Photo: via Instagram
4 · The response
The labs agreed. Singapore sets the clock.
Singapore met OpenAI, Anthropic, Google and Amazon to demand immediate reporting. OpenAI will follow whatever timeline Singapore sets. GovTech now requires a human to approve before a government AI agent pays, sends or deletes.
Photo: source
5 · Bottom line
Put it in the contract: 24 hours to tell you.
If a vendor's AI touches your data or your customers, your contract should say when you are told if it goes wrong, and what they owe you. Singapore asked for real time. Ask for the same.
Photo: K Shanmugam Sg (Facebook)