AI for Business Institute

FTC Probes OpenAI, Anthropic on AI Security Practices

The US Federal Trade Commission has launched an inquiry into OpenAI and Anthropic regarding the security of their AI models, signalling increased regulatory scrutiny over potential misuse and the need for robust AI governance.

What happened

The United States Federal Trade Commission (FTC) has initiated an inquiry into OpenAI and Anthropic, focusing on the security practices surrounding their artificial intelligence models. This action by the federal regulator suggests a growing concern regarding the potential for AI systems to be exploited for malicious purposes, including cyberattacks and disinformation campaigns. The investigation aims to understand how these prominent AI developers are safeguarding their technologies against misuse and ensuring the integrity of their platforms.

Why it matters

This FTC inquiry underscores a critical juncture for AI governance and ethics, highlighting the imperative for businesses to embed robust security protocols and responsible development practices from the outset. For business leaders and AI practitioners, it signals an intensified regulatory scrutiny over AI systems, moving beyond theoretical discussions to concrete enforcement actions. The focus on security risks, such as those enabling cyberattacks or disinformation, directly impacts strategic considerations for AI adoption, demanding comprehensive risk assessments and transparent mitigation strategies to maintain public trust and avoid regulatory penalties.

The Institute take

This regulatory action against leading AI developers is not merely about technical security; it's a profound statement on accountability in the AI ecosystem. Many will view this as a standard compliance issue, but it fundamentally challenges the prevailing "move fast and break things" mentality often seen in nascent technological fields.

Responsible AI leadership now demands a proactive stance on security, treating potential misuse and societal harm as core design considerations, not afterthoughts. Businesses must establish internal governance frameworks that mandate security-by-design, conduct rigorous red-teaming, and implement continuous monitoring, ensuring that the pursuit of innovation does not compromise public safety or ethical standards. This is about building trust in AI, which is impossible without verifiable security and accountability.

Briefing notes

Questions this story answers

01What is the purpose of the FTC's inquiry into OpenAI and Anthropic?

The FTC's inquiry aims to understand how these leading AI developers are safeguarding their technologies against misuse, such as exploitation for cyberattacks or disinformation campaigns, and ensuring the integrity of their platforms.

02Why is this FTC investigation significant for businesses and AI practitioners?

This investigation signals intensified regulatory scrutiny over AI systems, moving beyond theoretical discussions to concrete enforcement actions, and highlights the necessity for businesses to implement robust security protocols and responsible development practices from the outset.

03What does this regulatory action imply for AI accountability?

This action underscores the importance of accountability in the AI ecosystem, challenging the 'move fast and break things' mentality and demanding that potential misuse and societal harm be treated as core design considerations, not afterthoughts, requiring security-by-design and continuous monitoring.

Put the intelligence into practice

Your next move

Turn responsible AI understanding into a recognised standard of capability.
For professionalsGet certified as an individualFor teams and enterprisesAccredit your organisation

Continue the brief

General

AI Security: Perplexity Open-Sources Prompt Injection Defence Tool

Perplexity AI has open-sourced PromptShield, an internal tool designed to detect and mitigate prompt injection attacks against large language models, aiming to bolster AI security across the industry. This initiative provides businesses with an accessible defence mechanism but must be integrated into a comprehensive security strategy.

16 October 2026 2 min read
General

AI Security Alert Fatigue Plagues Managed Service Providers

New research reveals Managed Service Providers (MSPs) are overwhelmed by AI-generated security alerts, leading to ignored notifications and potential vulnerabilities. This highlights a critical need for more refined AI tools that reduce noise and enhance actionable insights without increasing human cognitive load.

16 October 2026 2 min read