From the journal

Illinois signs Artificial Intelligence Safety Measures Act into law, effective January 2027

Governor JB Pritzker signed the Illinois Artificial Intelligence Safety Measures Act on 6 July 2026, making Illinois the first US state to require mandatory annual third-party audits of frontier AI model developers. The Act applies to large frontier developers operating or deploying models in Illinois, requires transparency reports before each new or substantially modified frontier model deployment, and establishes civil penalties. Core obligations take effect 1 January 2027.

2 min read

Governor JB Pritzker signed the Artificial Intelligence Safety Measures Act (AIMSA) on 6 July 2026. The Act applies to large frontier developers, defined as companies that develop frontier AI models, and creates the first US state mandate for annual independent third-party audits of AI safety governance. Core provisions take effect 1 January 2027. The independent audit requirement takes effect 1 January 2028. The Illinois Emergency Management Agency and Office of Homeland Security, in consultation with the Attorney General, administer the regulatory programme.

AIMSA requires large frontier developers to create, implement, publish, and annually update a frontier AI safety framework addressing catastrophic-risk assessment, risk mitigations, governance procedures, cybersecurity controls, third-party evaluation standards, and internal-use catastrophic-risk analysis. Covered developers must file transparency reports with the Illinois Emergency Management Agency and Office of Homeland Security before deploying any new or substantially modified frontier model. Annual independent third-party audits of the safety framework are mandatory from 1 January 2028. Civil penalties apply for violations.

Large frontier developers whose models are deployed in Illinois or accessible to Illinois users fall within AIMSA's scope, regardless of where the developer is domiciled. Both Illinois-based companies and out-of-state or foreign developers are in scope. The Act defines covered employees and prohibits retaliation against those who report non-compliance. The threshold for what constitutes a large frontier developer will be set through rulemaking by the administering agencies.

AIMSA draws on model legislation developed in California and New York. Open questions include how regulators will define frontier model and set compute thresholds through rulemaking, how the Illinois obligations will interact with federal AI governance proposals pending in Congress, and whether developers serving Illinois users exclusively through API access fall within scope.

Licentium advises AI developers and deployers on US state AI law compliance, including readiness assessments under AIMSA and frontier model governance programme design. We maintain a partner network with US counsel for safety framework drafting and regulatory filing support. Work we undertake includes AI governance programme design, frontier model risk assessment, transparency report preparation, regulatory filing assistance, and AI compliance audit preparation.

Source: Illinois General Assembly, SB 315, Artificial Intelligence Safety Measures Act, signed 6 July 2026, effective 1 January 2027

AI Regulatory

More from the journal

See all

Hong Kong SFC and FSTB Conclude Consultation on Virtual Asset Advisory and Management Regimes, 26 May 2026

On 26 May 2026, Hong Kong's Securities and Futures Commission and Financial Services and the Treasury Bureau published consultation conclusions on proposed licensing regimes for virtual asset advisory and management service providers. The regimes apply the same business, same risks, same rules principle and align SFC licensing requirements with those for securities advisory and management businesses. A bill implementing the regimes is planned for introduction into the Legislative Council in 2026.

OCC Grants Circle Final Charter for First National Digital Currency Bank N.A., 9 July 2026

The Office of the Comptroller of the Currency granted final approval on 9 July 2026 for Circle Internet Group to establish First National Digital Currency Bank, N.A., operating as Circle National Trust. The bank opened 24 July 2026 under direct OCC oversight and will manage USDC reserves on a directed basis, act as collateral trustee for USDC holders, and provide digital asset custody services to Circle affiliates.

Manitoba Enacts Public Sector AI and Cybersecurity Governance Act June 2026

On 1 June 2026, Bill 51, The Public Sector Artificial Intelligence and Cybersecurity Governance Act (S.M. 2026, c. 43), received Royal Assent in Manitoba, Canada. The Act mandates transparency, accountability structures, and cybersecurity incident reporting for public sector entities using AI systems. Substantive obligations take effect only through regulations yet to be made.