From the journal

Illinois Enacts AI Safety Measures Act Mandating Annual Frontier AI Audits, July 2026

On July 6, 2026, Illinois Governor JB Pritzker signed the Artificial Intelligence Safety Measures Act (SB3312) into law. Illinois is the first U.S. state to require annual independent third-party audits of large frontier AI developers. The Act establishes a catastrophic risk assessment framework, incident reporting obligations, and civil penalties, with an effective date of January 1, 2027.

3 min read

On July 6, 2026, Governor JB Pritzker signed Illinois Senate Bill 3312 (the Artificial Intelligence Safety Measures Act) into law. The Act enters into force on January 1, 2027. Illinois is the first U.S. state to mandate annual independent third-party audits of frontier AI developers, following California and New York in enacting state-level frontier AI safety legislation.

The Act defines 'large frontier developer' as an entity that develops a 'frontier model' above a computing resource threshold to be set by implementing regulation. Covered entities must adopt, publish, and annually update a frontier AI framework addressing catastrophic risk assessment (defined as an incident likely to cause death or serious bodily injury to more than 50 persons, or property damage exceeding US$1 million), risk mitigations, governance structures, cybersecurity measures, and independent third-party audit findings. Annual independent third-party audits are mandatory. The Illinois Emergency Management Agency and Office of Homeland Security administer the reporting system, may issue implementing rules, and compile annual reports. The Attorney General enforces civil penalties for noncompliance.

Frontier AI developers with products or users in Illinois must establish enterprise-level AI safety programs, commission annual audits by qualified independent third parties, and build incident reporting pipelines before January 1, 2027. AI deployers and downstream businesses purchasing AI services from frontier developers are not directly regulated by the Act but may face contractual compliance obligations inserted by covered developers. Companies operating across California, New York, and Illinois face cumulative obligations that, in combination, may function as a de facto national AI safety standard given the three states' share of the U.S. AI market.

The computing threshold defining 'large frontier developer' remains to be established by regulation, leaving the practical scope of covered entities open until implementing rules are published. Companies developing large language models or frontier multimodal systems should assess their compute usage against likely threshold ranges and prepare for coverage as a precautionary step. The Act does not impose obligations on AI deployers or consumers who are not themselves frontier developers.

Licentium advises AI companies on U.S. state-level AI regulatory compliance and helps clients map obligations across Illinois, California, New York, and EU jurisdictions. Our partner network includes U.S. counsel experienced in state AI legislation and frontier AI governance. Work we undertake includes AI safety program design, frontier developer compliance, third-party audit preparation, incident reporting system design, and multi-state AI regulatory analysis.

Source: Illinois General Assembly, SB3312 (Artificial Intelligence Safety Measures Act), signed July 6, 2026

AI Regulatory

More from the journal

See all

Hong Kong SFC and FSTB Conclude Consultation on Virtual Asset Advisory and Management Regimes, 26 May 2026

On 26 May 2026, Hong Kong's Securities and Futures Commission and Financial Services and the Treasury Bureau published consultation conclusions on proposed licensing regimes for virtual asset advisory and management service providers. The regimes apply the same business, same risks, same rules principle and align SFC licensing requirements with those for securities advisory and management businesses. A bill implementing the regimes is planned for introduction into the Legislative Council in 2026.

OCC Grants Circle Final Charter for First National Digital Currency Bank N.A., 9 July 2026

The Office of the Comptroller of the Currency granted final approval on 9 July 2026 for Circle Internet Group to establish First National Digital Currency Bank, N.A., operating as Circle National Trust. The bank opened 24 July 2026 under direct OCC oversight and will manage USDC reserves on a directed basis, act as collateral trustee for USDC holders, and provide digital asset custody services to Circle affiliates.

Manitoba Enacts Public Sector AI and Cybersecurity Governance Act June 2026

On 1 June 2026, Bill 51, The Public Sector Artificial Intelligence and Cybersecurity Governance Act (S.M. 2026, c. 43), received Royal Assent in Manitoba, Canada. The Act mandates transparency, accountability structures, and cybersecurity incident reporting for public sector entities using AI systems. Substantive obligations take effect only through regulations yet to be made.