Illinois Artificial Intelligence Safety Measures Act (SB 315 / P.A. 104-0538)

Properties

jurisdiction: US, Illinois
level: state
domain: safety
status: enacted-pending
scope: Applies to frontier developers (persons that train, or initiate the training of, a frontier model using more than 10^26 integer or floating-point operations of computing power) and, with heightened duties, to large frontier developers (frontier developers whose annual gross revenue, together with affiliates, exceeds $500,000,000).
obligations: Beginning January 1, 2028, a large frontier developer must write, implement, comply with, and clearly and conspicuously publish on its website a frontier AI framework addressing catastrophic-risk assessment, mitigation, governance, cybersecurity, third-party evaluation, and internal-use risks, updated annually; and, beginning January 1, 2028 (or 90 days after first qualifying as a large frontier developer, if later), must annually retain a third party to perform an independent audit of compliance, publishing the results (the first US state mandate for recurring third-party AI safety audits). Frontier developers must publish a transparency report before deploying a new or substantially modified frontier model and report critical safety incidents. Whistleblower protections and anti-retaliation provisions apply to covered employees.
effectiveDate: 2027-01-01
enactedDate: 2026-07-06
penalties: Civil penalties enforced exclusively by the Illinois Attorney General (no private right of action): not to exceed $1,000,000 for a first violation, and not to exceed $3,000,000 per subsequent violation.
appliesTo: Frontier AI model developers; large frontier developers (annual gross revenue over $500 million) face the framework and independent-audit duties
officialUrl: https://www.ilga.gov/documents/legislation/104/SB/10400SB0315enr.htm
notes: Signed by Governor JB Pritzker on July 6, 2026 as Public Act 104-0538. The Act's own effective date (Section 99: 'This Act takes effect January 1, 2027') is recorded in effectiveDate above, matching the convention used for the two closest tracked siblings (ca-sb53, ny-raise-act). The substantive Section 10 frontier-framework and independent-audit duties phase in later, beginning January 1, 2028 (see obligations field). Distinct from ca-sb53 and ny-raise-act: Illinois is the first US state to mandate recurring (annual) independent third-party audits of covered systems, versus a one-time audit trigger in New York's RAISE Act and disclosure-only obligations in California's SB 53.

Properties

jurisdiction

US, Illinois

level

state

domain

safety

status

enacted-pending

scope

Applies to frontier developers (persons that train, or initiate the training of, a frontier model using more than 10^26 integer or floating-point operations of computing power) and, with heightened duties, to large frontier developers (frontier developers whose annual gross revenue, together with affiliates, exceeds $500,000,000).

obligations

Beginning January 1, 2028, a large frontier developer must write, implement, comply with, and clearly and conspicuously publish on its website a frontier AI framework addressing catastrophic-risk assessment, mitigation, governance, cybersecurity, third-party evaluation, and internal-use risks, updated annually; and, beginning January 1, 2028 (or 90 days after first qualifying as a large frontier developer, if later), must annually retain a third party to perform an independent audit of compliance, publishing the results (the first US state mandate for recurring third-party AI safety audits). Frontier developers must publish a transparency report before deploying a new or substantially modified frontier model and report critical safety incidents. Whistleblower protections and anti-retaliation provisions apply to covered employees.

effectiveDate

2027-01-01

enactedDate

2026-07-06

penalties

Civil penalties enforced exclusively by the Illinois Attorney General (no private right of action): not to exceed $1,000,000 for a first violation, and not to exceed $3,000,000 per subsequent violation.

appliesTo

Frontier AI model developers; large frontier developers (annual gross revenue over $500 million) face the framework and independent-audit duties

officialUrl

https://www.ilga.gov/documents/legislation/104/SB/10400SB0315enr.htm

notes

Signed by Governor JB Pritzker on July 6, 2026 as Public Act 104-0538. The Act's own effective date (Section 99: 'This Act takes effect January 1, 2027') is recorded in effectiveDate above, matching the convention used for the two closest tracked siblings (ca-sb53, ny-raise-act). The substantive Section 10 frontier-framework and independent-audit duties phase in later, beginning January 1, 2028 (see obligations field). Distinct from ca-sb53 and ny-raise-act: Illinois is the first US state to mandate recurring (annual) independent third-party audits of covered systems, versus a one-time audit trigger in New York's RAISE Act and disclosure-only obligations in California's SB 53.