When AI agents go rogue, who can Hong Kong hold accountable?

When OpenAI’s AI agents launched an autonomous attack on Australia’s Medicare portal in June, it took the company 84 days to report what had happened – a delay that exposed gaps in regulatory oversight that Hong Kong industry experts say the city must also address. The incident followed breaches involving Google’s Gemini AI, which compromised three companies a month earlier.

Google did not confirm those breaches until September, and only in response to media questions. Such incidents have drawn...