Illinois has drawn a line in the sand on artificial intelligence. On Monday, July 6, in a signing ceremony in Chicago surrounded by lawmakers and safety advocates, Gov. JB Pritzker put his name on Senate Bill 315, the Artificial Intelligence Safety Measures Act — a law that supporters call the most protective in the nation and that critics warn could entrench the very giants it aims to police.

The measure makes Illinois the third state, after California and New York, to impose binding safety, transparency and accountability obligations on the developers of the most powerful "frontier" AI models. But it goes a step further than either: it becomes the first state law in the country to require the largest AI companies to submit to annual, independent third-party audits of their safety practices.

"Congress and the president ought to be passing similar legislation, but they've so far been unwilling, because many are captive to special interests that profit from the industry having no regulation," Pritzker said before signing the bill. "We can work together to establish thoughtful guardrails in ways that benefit both industry and the public, or we can allow a handful of actors to evade accountability and push the costs and detriment onto ordinary people. Illinois has chosen our path."

What the law requires

SB 315 targets a narrow slice of the industry: developers of models trained with massive computing power whose companies pull in more than $500 million in annual revenue — a threshold aimed squarely at the likes of OpenAI, Anthropic, Google, Meta and xAI, not startups or academic labs.

Covered developers must publish a safety framework describing how they identify and assess "catastrophic risk," defined as an incident that could kill or seriously injure more than 50 people or cause more than $1 million in property damage — for instance, a model helping a user build a chemical, biological or nuclear weapon, or mount a major cyberattack.

The law also imposes strict incident-reporting timelines. Developers must notify the state within 72 hours of identifying a qualifying safety incident — such as unauthorized access to model weights or a loss of control over a system — and within 24 hours if it poses an imminent risk of death or serious physical injury. The bill adds confidential reporting channels and whistleblower protections for employees who raise safety concerns.

Enforcement runs through the Illinois attorney general's office, which can seek civil penalties of up to $1 million for a first violation and up to $3 million for each subsequent one. The law is set to take effect Jan. 1, 2028.

The annual third-party audit is the provision that most distinguishes Illinois. New York's counterpart required only a single independent audit when a developer first grew large enough to qualify; Illinois demands one every year.

State Sen. Mary Edly-Allen, D-Libertyville, the bill's Senate sponsor, framed the urgency in blunt terms. "We are not willing to wait for Congress to act," she said. Rep. Daniel Didech, D-Buffalo Grove, the House sponsor, argued the dangers are already here: "We have already seen the first AI-inspired mass shooting. We have already seen AI systems utilized to attack a municipal water and drainage utility." He compared the moment to earlier technological leaps: "Every transformative technology in our history, from automobiles to electricity to air travel, has delivered enormous benefits while carrying real risks, and in every case the government responded not by banning the technology and not by taking a hands-off approach, but by building safeguards."

A patchwork — and a federal fight

Notably, SB 315 drew support from two of the biggest labs it regulates. Both OpenAI and Anthropic backed the bill, and Anthropic representatives attended the signing. The legislation passed with broad bipartisan support: unanimously in the House, with only five Republican senators opposed.

That does not mean industry is uniformly on board. TechNet, a coalition of tech executives, objected to the audit mandate during committee debate. "We remain concerned that Illinois would effectively be requiring private actors to make highly subjective determinations requiring AI safety compliance without established national standards, certifications, or clear regulatory guardrails," TechNet's Ninia Linero told lawmakers in May. Groups like NetChoice urged a veto, and skeptics warn that compliance costs favor deep-pocketed incumbents over smaller challengers.

The bigger collision is with Washington. Illinois signed its bill into a federal environment openly hostile to state AI rules. President Trump's Executive Order 14365, issued in December 2025, directed agencies to establish a national AI framework and challenge conflicting state laws. On July 1, the Federal Trade Commission advanced a proposed policy statement — its comment period runs through July 31 — asserting that models configured to pursue "undisclosed ideological objectives," including in response to state mandates, could constitute deceptive practices under Section 5 of the FTC Act. Legal analysts across the spectrum note the FTC's preemption authority is far from settled.

Illinois lawmakers are betting on strength in numbers. They estimate that Illinois, California and New York together account for roughly 40% of the U.S. AI market — enough, they argue, to set a de facto national standard regardless of what Washington does.

What to watch next

The immediate question is whether the FTC's July statement hardens into an enforcement posture that puts Illinois, California and New York on a collision course with federal regulators — and whether that fight reaches court before the law even takes effect in 2028. Watch, too, for how developers operationalize the audit requirement absent any agreed national standard for what a "safety audit" should measure. Advocates who shaped the bill, including Secure AI's Scott Wisor, already call it only a first step, flagging pre-deployment risk evaluation, medical AI and education as the next frontiers. "This is a huge step forward," Wisor said, "but I think there's more we can do."

"Congress and the president ought to be passing similar legislation, but they've so far been unwilling, because many are captive to special interests that profit from the industry having no regulation."
— JB Pritzker, Governor of Illinois
$500M
Revenue threshold for covered developers
72 hours
Critical incident reporting window
Up to $3M
Civil penalties for repeat violations
Jan 1, 2028
Effective date