Illinois Mandates Independent AI Safety Audits for Major Developers

Illinois has enacted the nation's first law requiring independent safety audits of major artificial intelligence developers, establishing a regulatory framework that state lawmakers say fills a gap left by federal inaction.

Governor JB Pritzker signed the Artificial Intelligence Safety Measures Act on July 6, 2026, in Chicago. The legislation targets AI companies with more than $500 million in annual gross revenue and takes effect January 1, 2028.

Core requirements for AI developers

Under the new law, covered companies must publish detailed explanations of how their products could pose catastrophic risks and their mitigation strategies. They must also disclose their processes for identifying and responding to critical safety incidents.

The legislation mandates that developers retain a third-party auditor annually to conduct independent compliance reviews. These auditors must demonstrate technical expertise specifically in frontier AI model safety—a requirement that sets Illinois apart from other state AI regulations.

Companies face a 72-hour deadline to report critical safety incidents to the state once they have sufficient reason to believe one has occurred. Penalties range from $1 million for initial violations to $3 million for repeat offenses.

Whistleblower protections included

The law prohibits companies from implementing policies that prevent employees from disclosing information to state or federal authorities when they believe the company poses a public safety hazard. Developers must maintain anonymous internal reporting channels for employees who identify potential dangers to public health or safety.

State Senator Mary Edly-Allen, the chief Senate sponsor, framed the legislation as a corrective measure. "If we got social media wrong, and we did, we cannot afford to get AI wrong at an even greater scale," she said.

House Speaker Emanuel "Chris" Welch emphasized that AI decision-making should not be left solely to federal authorities or technology companies operating under a "move fast and break things" philosophy.

Industry response and federal context

Several AI companies supported the legislation during the spring legislative session. Anthropic, developer of the Claude chatbot, said the law "takes the safety practices leading labs already follow voluntarily" and establishes a baseline expectation. OpenAI, maker of ChatGPT, also backed the measure.

The Illinois law arrives as the Trump administration has shown reluctance to impose federal AI regulations, citing concerns that oversight could hinder technological advancement. While California and New York have passed significant AI legislation, no other state has enacted an independent audit requirement, according to supporters.

Why it matters

Illinois is establishing itself as a testing ground for AI governance in the absence of comprehensive federal regulation. The independent audit requirement creates accountability mechanisms that go beyond voluntary industry commitments, potentially influencing how other states approach AI oversight. For AI companies operating at scale, the law sets a precedent that third-party verification of safety practices may become standard across multiple jurisdictions.

Pritzker also signed related AI legislation last month banning bots from purchasing event tickets in bulk. A proposal targeting AI-driven rental pricing platforms remains on his desk.

Several AI-related measures failed to advance before the General Assembly adjourned for summer, including a bill requiring AI companies to detect suicidal ideation in users and refer them to crisis services.

These details were first reported by Olivia Olander for the Chicago Tribune.