What it is. The Artificial Intelligence Safety Measures Act, signed by Gov. J.B. Pritzker on July 6, 2026, is the first U.S. state law requiring independent third-party safety audits of frontier AI models (StateScoop). Most "AI safety" laws deal in aspirations. This one deals in thresholds.
The word doing the heavy lifting is "catastrophic risk." Illinois defines it as harm causing more than 50 deaths or serious injuries, or more than $1 million in damage (Buchanan Ingersoll & Rooney). A legal definition with a body count. If your model plausibly enables that, the obligations attach.
Here is what attaches:
| Requirement | The number |
|---|---|
| Who is covered | Developers with >$500M revenue plus large compute |
| Incident reporting | 72 hours, or 24 if harm is imminent |
| Third-party audits | Annual, independent |
| Penalty | Up to $3M per violation |
The revenue-plus-compute gate regulates a handful of labs. A startup fine-tuning an open model in a garage falls outside it. Pritzker's people framed it as landmark regulation aimed at mitigating risk (Capitol News Illinois).
California had tried the harder version and pulled back — Gov. Newsom vetoed its mandatory-safety bill, SB 1047, in 2024, and the state settled a year later for the lighter SB 53, which asks frontier labs to disclose their practices rather than prove their models safe (AO Shearman). Illinois did what neither California nor Congress has: put frontier labs under a mandatory outside audit, backed by fines large enough to notice and small enough to survive a compliance-team meeting. Three million per violation won't bankrupt anyone with $500M in revenue. The audit requirement carries the force: someone from outside the company now reads the safety case.
One thing nobody has nailed down. The effective date is genuinely unsettled. Coverage puts it at January 1, 2027 in one place and 2028 in another (WTTW). For a compliance calendar, it is the difference between building an audit pipeline this year or next.
Watch for the first cleanup or trailer bill out of Springfield fixing the 2027-versus-2028 gap; until it lands, treat January 1, 2027 as the date to plan against.
The Signal is the public edge of a private practice. Sherpa points the same intelligence engine at one owner's business — competitors, suppliers, regulators, watched daily, graded and sourced. Work with a Sherpa →