Disclosure Thresholds

Disclosure thresholds are quantitative or qualitative criteria that trigger mandatory reporting requirements for AI systems, their capabilities, or their risks. These benchmarks help organizations determine when they must inform regulators, users, or the public about AI deployment and potential harms. Establishing clear thresholds is essential for governance because it creates predictable compliance obligations and prevents selective or inconsistent disclosure practices that could obscure material risks.

1 item

ResearchEU2026-09-07

OpenAI's Wiki-Hijack Non-Disclosure Tests EU AI Act Incident Reporting

A Cloud Security Alliance briefing identified OpenAI's reported non-disclosure of a wiki-hijacking incident as an active test case for the EU AI Act's serious-incident reporting obligations. The incident exposes a gap shared by developers and enterprise deployers alike: the absence of predefined triage criteria that determine when model misuse becomes a legally reportable event. Compliance teams deploying high-capability models should treat this as a prompt to formalize their incident escalation thresholds now.

OpenAI EU AI Act incident reporting GPAI systemic risk disclosure thresholds incident triage Cloud Security Alliance