Binding law — not yet in force or stayed
Frontier developers must report critical safety incidents to Illinois within 72 hours, or 24 hours if lives are at imminent risk (Illinois SB 315)
Section 15(c) of the Illinois AI Safety Measures Act requires every frontier developer, from January 1, 2027, to report a critical safety incident involving its frontier models to the Illinois Emergency Management Agency and Office of Homeland Security and to the Attorney General within 72 hours of learning facts that support a reasonable belief it happened. The report gives the date, why the event qualifies, and a short plain description, and may later be amended. An incident posing an imminent risk of death or serious physical injury must go to an appropriate authority, such as law enforcement, within 24 hours. Qualifying incidents are limited to weight theft or tampering causing death or injury, harm from a catastrophic risk, loss of control causing death or injury, and a model deceptively subverting the developer's controls outside testing. Detect a frontier developer with no incident procedure matching those definitions, clocks, recipients, and report fields.
il-sb315.critical-safety-incident-reporting · IL PA 104-0538, Sec. 15(c) · official source · applies from 2027-01-01 · jurisdictions: US-IL
Binding law — not yet in force or stayed
Large frontier developers must publish and follow a frontier AI framework from 2028 (Illinois SB 315)
Illinois's Artificial Intelligence Safety Measures Act (Public Act 104-0538) takes effect on January 1, 2027, but gives large frontier developers (those training models with more than 10^26 operations whose group revenue topped $500 million the year before) until January 1, 2028 to write, implement, obey, and conspicuously publish a frontier AI framework. The framework must explain their approach to the same ten topics as New York's RAISE Act: standards, catastrophic-capability thresholds, mitigations, pre-deployment and internal-use review, third-party assessment, update triggers, protection of unreleased weights, critical safety incident response, internal governance, and internal-use risk including oversight evasion. They must review it at least yearly and republish material changes with reasons within 30 days. From the Act's start date they must also send the state emergency-management agency (IEMA-OHS) summaries of internal-use catastrophic-risk assessments every three months or on an agreed schedule. Detect a covered developer with no published framework (from 2028) or no record of those summaries.
il-sb315.frontier-ai-framework · IL PA 104-0538, Sec. 10(a) · official source · applies from 2027-01-01 · jurisdictions: US-IL
Binding law — not yet in force or stayed
Large frontier developers must obtain and publish an annual independent compliance audit from 2028 (Illinois SB 315)
Section 10(d) of Illinois's Artificial Intelligence Safety Measures Act (Public Act 104-0538) makes every large frontier developer hire an independent third party each year to audit whether it is meeting Section 10: the frontier AI framework, transparency reports, internal-use risk summaries and the related duties. The first audit year starts on January 1, 2028, or 90 days after the developer first qualifies as a large frontier developer if that is later. The auditor must work to generally accepted auditing standards, bring frontier-model safety expertise, and have no financial interest in the developer (or the developer in it), and its fee cannot depend on the findings. The developer must open the materials the audit needs, including unredacted versions of what it published, though it may set security protocols. The auditor's signed report covers substantial compliance, material deviations with recommendations, internal controls and accountable senior staff, audit personnel, conflicts of interest, and methodology. Within 30 days the developer must post a high-level summary and a redacted copy on its website, send the redacted report to IEMA-OHS and the Attorney General, and keep the unredacted report while any frontier model is deployed plus five years. Detect a covered developer with no audit engagement, report, publication, or transmittal record once the duty applies.
il-sb315.independent-compliance-audit · IL PA 104-0538, Sec. 10(d) · official source · applies from 2028-01-01 · jurisdictions: US-IL
Binding law — not yet in force or stayed
Frontier developers must publish a transparency report at deployment, with machine-readable risk summaries (Illinois SB 315)
From January 1, 2027, Section 10(c) of Illinois's AI Safety Measures Act requires any frontier developer to post a transparency report on its website before or when it deploys a new or substantially modified frontier model, listing its website, a contact channel for individuals, the release date, supported languages and output modalities, intended uses, and general use restrictions. A large frontier developer must add summaries of its framework-based catastrophic-risk assessments, their results, third-party evaluator involvement, and other framework steps for the model, and, unlike New York's equivalent, must deliver those summaries in a machine-readable format so model claims can be verified. A model or system card containing the information counts. Detect a frontier-model release with no report, missing required fields, or risk summaries available only as prose or PDF.
il-sb315.transparency-report · IL PA 104-0538, Sec. 10(c)(1) · official source · applies from 2027-01-01 · jurisdictions: US-IL
Binding law — not yet in force or stayed
Frontier developers must not gag or retaliate against AI safety whistleblowers (Illinois SB 315)
Section 20 of the Illinois AI Safety Measures Act forbids a frontier developer from making or enforcing any rule, policy, or contract that stops employees responsible for critical-safety-incident risk from telling IEMA-OHS, the Attorney General, a federal authority, a supervisor, or an authorized colleague about activities posing a specific and substantial catastrophic-risk danger or about violations of the Act, and from retaliating against them for doing so. Contracts also may not block disclosures protected by the Illinois Whistleblower Act. Developers must give those employees clear notice of these rights, by continuous posting or a yearly acknowledged written notice, and large frontier developers must run an anonymous internal reporting process with monthly status updates to the reporter and quarterly sharing with officers and directors. Detect employment templates or policies that restrict such disclosures, or the absence of the rights notice and anonymous channel.
il-sb315.whistleblower-protection · IL PA 104-0538, Sec. 20(a) · official source · applies from 2027-01-01 · jurisdictions: US-IL