Illinois Enacts AI Safety Measures Act Requiring Third-Party Audits

3 min readSources: National Law Review

Illinois passed the Artificial Intelligence Safety Measures Act with mandatory audits for large AI developers.

Why it matters: This law establishes new compliance mandates for AI developers operating in Illinois, impacting companies nationwide. Legal teams must understand and prepare for these requirements to ensure adherence and manage liability risks.

  • Signed into law on July 6, 2026, by Governor JB Pritzker.
  • Targets 'large frontier developers' with over $500 million annual revenue.
  • Mandates publishing AI safety frameworks, transparency reports, and annual disclosures.
  • Requires independent third-party audits starting January 1, 2028.
  • Applies to companies with operational connections to Illinois, regardless of location.

On July 6, 2026, Illinois Governor JB Pritzker signed into law the Artificial Intelligence Safety Measures Act (SB 315). This legislation sets mandatory safety, transparency, and oversight standards for advanced AI systems.

The Act defines 'large frontier developers' as companies with annual gross revenues exceeding $500 million. These entities must publish a detailed AI safety framework, provide transparency reports, submit annual disclosures on AI risks, and notify regulators of any critical safety incidents.

Illinois introduces the first state-level requirement for independent third-party audits of AI systems, effective January 1, 2028. This adds a significant compliance obligation beyond the transparency and reporting mandates already established in California and New York.

The law applies broadly to any company with operational ties to Illinois, including those headquartered elsewhere but providing AI services or products in the state. This scope emphasizes the state's intent to regulate frontier AI technologies that may pose systemic risks.

Although initial provisions take effect January 1, 2027, the audit mandate is delayed until 2028 to allow companies to implement necessary processes. The term “frontier AI” generally refers to advanced artificial intelligence systems that operate near or beyond current technological frontiers and pose heightened safety or ethical concerns.

Independent experts highlight the legislation's significance. According to a report by WTTW Chicago, industry leaders view the Act as part of an emerging regulatory framework balancing AI innovation with public safety.

James Hartmann, an executive at AI company Anthropic, told the WTTW Chicago interview: "We believe AI can be one of the most consequential technologies in human history, and it is critical that companies building advanced systems operate safely."

Illinois joins California and New York in enacting targeted laws to regulate frontier AI, signaling growing state-level engagement amid ongoing federal discussions on AI governance.

By the numbers:

  • $500 million — annual revenue threshold for covered developers
  • January 1, 2027 — effective date for most provisions
  • January 1, 2028 — start of mandatory third-party audits

Yes, but: The law’s requirements focus on financially large developers, potentially excluding smaller AI startups or emerging companies from regulation initially.

What's next: Companies subject to the law should begin preparing compliance frameworks ahead of the January 2027 enforcement date, especially for transparency and reporting obligations.