Artificial Intelligence Safety Measures Act Explained for Illinois Lawyers
On July 6, 2026, Governor JB Pritzker signed Senate Bill 315, making the Artificial Intelligence Safety Measures Act an Illinois law. As a result, Illinois now joins California and New York as the third state to regulate frontier artificial intelligence.
However, the law targets a narrow group of companies known as frontier developers, not ordinary law firms. Still, Illinois lawyers should understand what the Act requires, because their clients and technology vendors may fall within its scope.
What the Artificial Intelligence Safety Measures Act Requires
Under the Artificial Intelligence Safety Measures Act, the largest AI companies face new transparency and safety obligations. Illinois now requires annual independent audits, a first among states with frontier AI laws.
The law lays out several core duties for large frontier developers, including the following:
Frontier AI framework: Publish a safety framework covering risk thresholds, mitigations, and cybersecurity protections for model weights, effective January 1, 2028.
Transparency reports: File public reports before deploying a new or substantially modified frontier model.
Annual independent audits: Hire an outside auditor each year and send summaries to state regulators.
Critical safety incident reporting: Report serious incidents within 72 hours, or 24 hours if there is an imminent risk of death or injury.
Whistleblower protections: Give employees a safe way to report safety concerns without fear of retaliation.
In addition, large frontier developers must file annual disclosure statements starting January 1, 2027, well before the other duties take effect. Together, these rules push large AI developers toward more open safety practices and clearer public accountability.
Artificial Intelligence Safety Applies to “Frontier Developers”
Not every business needs to worry about this new law. In fact, the Act only covers frontier developers, companies that train AI models using an extremely large amount of computing power. For the record, a large frontier developer is a frontier developer whose combined revenue, with its affiliates, exceeds $500 million a year.
As a result, most Illinois law firms and even most local businesses will fall outside the Act's reach. That said, a client's business could still qualify, especially larger technology or AI companies operating in the state. Enforcement power rests solely with the Illinois Attorney General, and the Act does not create a private right of action. Under the enforcement provisions, penalties can reach $1,000,000 for a first violation and $3,000,000 for each violation after that.
Because the Attorney General collects these penalties, individual lawyers or clients cannot sue a frontier developer directly under this law. For context, California and New York passed similar frontier AI laws in 2025, and Illinois is now the third state to adopt this approach.
Why This Law Matters for Illinois Lawyers
Even though the Act mainly targets large AI companies, Illinois lawyers still have good reasons to pay attention. For one, many law firms rely on AI vendors for legal research, document review, and drafting support. As those vendors adjust to new transparency and audit requirements, firms may see updated contract terms, service agreements, and security disclosures.
Also worth noting, some law firm clients, particularly technology and AI companies, could qualify as frontier developers themselves. When that happens, lawyers advising those clients need to understand the disclosure statement, audit, and incident-reporting timelines built into the law. Specifically, critical safety incidents carry strict reporting windows. The law stipulates 72 hours for standard incidents and 24 hours for incidents involving an imminent risk of death or injury.
More broadly, Illinois Rule of Professional Conduct 1.1 already requires lawyers to understand the technology they use in practice, including AI tools. This duty connects closely to the broader ethical questions AI raises for lawyers, from data security to client confidentiality. Meanwhile, firms that want a closer look at these questions can review this law firm risk management guidance. Because California, New York, and Illinois each impose their own frontier AI rules, multi-state firms face extra complexity.
Ensuring Compliance with the Artificial Intelligence Safety Measures Act
Overall, the Artificial Intelligence Safety Measures Act marks a significant shift in how Illinois regulates powerful AI systems. Still, most of its duties will not apply directly to Illinois law firms, since the law targets only the largest frontier AI developers. However, staying informed helps lawyers advise clients accurately, negotiate stronger vendor contracts, and meet their own duty of technological competence.
Beginning January 1, 2027, and again on January 1, 2028, new compliance deadlines will phase in, so early preparation pays off. Illinois lawyers who want help reviewing their firm's AI use, vendor agreements, or professional liability coverage can contact the team at ISBA Mutual Insurance Company today.
