Illinois Governor Signs Frontier AI Model Law

2026-07-17 · Source: Privacy & Cybersecurity Law Blog · Field: Legal & Regulatory — Compliance & Risk Management, Regulatory Affairs & Government Relations · Depth: Intermediate, short

Summary

On July 6, 2026, Illinois Governor JB Pritzker signed the Artificial Intelligence Safety Measures Act (Senate Bill 315) into law, making Illinois the third state, following California and New York, to establish comprehensive AI safety and transparency requirements. This Act uniquely mandates annual independent third-party audits for covered developers' safety practices. Effective January 1, 2027, for some provisions, the law targets "frontier developers" using over 10^26 integer or floating-point operations of computing power, with "large frontier developers" (those with over \$500 million in annual gross revenue) facing the most stringent obligations. Key requirements include publishing a "frontier AI framework" by January 1, 2028, detailing catastrophic risk management, transparency reports for new models, and reporting critical safety incidents within 72 hours. Developers must also file annual disclosures, protect whistleblowers, and face civil penalties up to \$3 million for violations.

Key takeaway

For Directors of AI/ML evaluating compliance for frontier AI models, Illinois's Artificial Intelligence Safety Measures Act introduces mandatory annual third-party audits and stringent reporting. You should immediately assess your models against the 10^26 operations and \$500 million revenue thresholds. Develop a comprehensive "frontier AI framework" and internal reporting channels, aligning with the strictest multi-state requirements to streamline compliance and avoid civil penalties up to \$3 million.

Key insights

Illinois's new AI law sets a precedent for mandatory annual third-party safety audits for large frontier AI developers.

Principles

• State-level AI regulation is rapidly expanding.
• Catastrophic risk assessment requires structured frameworks.
• Independent oversight enhances AI safety compliance.

Method

Large frontier developers must establish a "frontier AI framework" by January 1, 2028, detailing risk evaluation, mitigation, cybersecurity, incident response, and internal governance, subject to annual review and third-party audits.

In practice

• Evaluate if your company meets the 10^26 operations or \$500 million revenue thresholds.
• Design compliance programs to meet the strictest multi-state AI regulations.
• Implement internal reporting channels for safety concerns.

Topics

• AI Regulation
• Frontier AI Models
• Third-Party Audits
• Catastrophic Risk
• Compliance Frameworks
• Illinois Law

Best for: CTO, VP of Engineering/Data, Executive, Legal Professional, Policy Maker, Director of AI/ML

Related on AIssential

• Illinois Enacts AI Safety and Transparency Law for Frontier AI Developers — Illinois' AISMA uniquely mandates independent third-party audits for large frontier AI developers' safety compliance.
• Illinois Lawmakers Just Passed America’s Strongest AI Safety Bill — The Illinois AI safety bill mandates third-party audits for frontier AI labs, setting a national precedent for regulatory oversight.
• Illinois Clears Landmark AI Safety Bill - Broadband Breakfast — Illinois's SB 315 establishes a pioneering state-level regulatory framework for frontier AI safety, including mandatory audits.
• Illinois Drops the Hammer on AI Companies - Gizmodo — Illinois's new AI Safety Measures Act mandates independent third-party safety audits, setting a precedent for state-level AI regulation.
• Trump loses more control over AI regulation as Illinois passes landmark law — Illinois's new AI safety law mandates third-party testing and incident reporting for frontier models, setting a national regulatory precedent.
• The best AI bill yet may not get far — The Great American AI Act represents a comprehensive, yet politically challenged, federal effort to establish AI safety standards through mandatory audits and a contentious preemption framework.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Privacy & Cybersecurity Law Blog.