From the journal

Illinois Signs Frontier AI Safety Law Requiring Annual Audits, 6 July 2026

Illinois Governor JB Pritzker signed Senate Bill 315, the Artificial Intelligence Safety Measures Act, on 6 July 2026. The law targets developers of frontier AI models that generate more than $500 million in annual revenue and are trained using specified compute thresholds. It takes effect 1 January 2027 and mandates annual independent third-party audits, AI safety frameworks, incident reporting, and whistleblower protections, making Illinois the first US state to require independent safety audits for large AI developers.

2 min read

Illinois Governor JB Pritzker signed Senate Bill 315, enacted as the Artificial Intelligence Safety Measures Act, on 6 July 2026. The Act passed the Illinois General Assembly with bipartisan support and takes effect 1 January 2027. Illinois is the first US state to mandate annual independent third-party safety audits for developers of frontier AI systems.

The Act applies to 'covered developers', defined as entities that develop frontier AI models generating more than $500 million in annual revenue and trained using compute resources meeting a floating-point-operations-per-second threshold to be set by the Attorney General in rulemaking. Covered developers must: publish annual AI safety frameworks identifying foreseeable risks and mitigation measures; commission independent third-party audits at least once per calendar year; report safety incidents to the Illinois Attorney General within designated timelines; and maintain whistleblower protections for employees who disclose AI safety concerns. The Act places Illinois alongside California and New York in requiring transparency obligations on developers of large-scale AI systems.

Frontier AI developers with revenues above $500 million whose models are used by Illinois residents or deployed by Illinois-based businesses must prepare their first independent audit cycle before 1 January 2027. Covered developers must designate responsible personnel, document AI safety frameworks, and establish incident reporting channels. AI auditing firms capable of assessing frontier models at the scale the Act contemplates will face increased demand. Downstream deployers that rely on covered developers' APIs should obtain contractual representations regarding audit status and compliance.

The Act's obligations apply only to developers meeting both the revenue and compute thresholds; smaller developers are not covered. The Attorney General retains rulemaking authority to define the compute threshold, leaving technical scope open pending final rules. The Act contains an exemption for research and academic use. Civil enforcement is vested in the Illinois Attorney General with civil penalties prescribed in the statute. No private right of action is created.

Licentium advises clients on US AI regulatory obligations and may assist directly or through its partner network. Covered developers, their enterprise customers, and downstream deployers are welcome to contact us. Work we undertake includes US state AI law compliance, safety framework documentation, independent audit preparation support, AI vendor due diligence, incident response protocols, and AI regulatory monitoring across US and EU jurisdictions.

Source: Illinois General Assembly, Senate Bill 315, Artificial Intelligence Safety Measures Act, signed 6 July 2026

More from the journal

See all

Hong Kong SFC and FSTB Conclude Consultation on Virtual Asset Advisory and Management Regimes, 26 May 2026

On 26 May 2026, Hong Kong's Securities and Futures Commission and Financial Services and the Treasury Bureau published consultation conclusions on proposed licensing regimes for virtual asset advisory and management service providers. The regimes apply the same business, same risks, same rules principle and align SFC licensing requirements with those for securities advisory and management businesses. A bill implementing the regimes is planned for introduction into the Legislative Council in 2026.

OCC Grants Circle Final Charter for First National Digital Currency Bank N.A., 9 July 2026

The Office of the Comptroller of the Currency granted final approval on 9 July 2026 for Circle Internet Group to establish First National Digital Currency Bank, N.A., operating as Circle National Trust. The bank opened 24 July 2026 under direct OCC oversight and will manage USDC reserves on a directed basis, act as collateral trustee for USDC holders, and provide digital asset custody services to Circle affiliates.

Manitoba Enacts Public Sector AI and Cybersecurity Governance Act June 2026

On 1 June 2026, Bill 51, The Public Sector Artificial Intelligence and Cybersecurity Governance Act (S.M. 2026, c. 43), received Royal Assent in Manitoba, Canada. The Act mandates transparency, accountability structures, and cybersecurity incident reporting for public sector entities using AI systems. Substantive obligations take effect only through regulations yet to be made.