Illinois Creates First Mandatory Third-Party Audit Requirement for Frontier AI — Signed July 6

The Illinois Artificial Intelligence Safety Measures Act — signed into law on July 6 by Governor Pritzker and documented in the JD Supra August 10 Washington Report — is the first state law in the United States requiring annual independent third-party audits of frontier AI models' safety practices. The Act applies to developers with more than $500 million in annual revenue whose models exceed a specified computational threshold. Requirements include creating and publishing safety frameworks, filing pre-deployment transparency reports, reporting critical safety incidents within 72 hours, providing whistleblower protections, and paying proportional fees. Civil penalties reach $3 million per violation; enforcement authority rests exclusively with the Illinois attorney general — no private right of action. For law firms advising frontier AI developers, the Illinois Act creates compliance obligations that go beyond the disclosure-only approaches of California and New York by mandating external verification. For law firms that are themselves evaluating enterprise AI vendors, the Illinois framework is now a due-diligence reference point: vendors subject to the Act (Harvey, Clio, Thomson Reuters AI, LexisNexis) must demonstrate safety-framework compliance, third-party audit results, and incident-reporting capabilities.