AI Regulation in Illinois: Laws, Status and Penalties

Illinois regulates AI mainly through employment and biometric law rather than a dedicated AI act. HB 3773 amended the Illinois Human Rights Act to bar employers from using AI in ways that discriminate against protected classes. Separately, the Biometric Information Privacy Act (BIPA), which predates the AI wave, drives much of the country's biometric AI litigation.

Key points

HB 3773 amends the Illinois Human Rights Act to cover discriminatory employer use of AI.
BIPA requires consent before collecting biometric identifiers and allows a private right of action.
BIPA is the most-litigated biometric statute in the US and shapes facial-recognition risk nationally.
The Safety Measures Act (signed July 6, 2026) makes Illinois the third frontier-AI state and the first to mandate independent third-party audits, annually from January 1, 2028, enforced by the attorney general with no private right of action.

Laws and instruments

AI in employment (Human Rights Act amendment)

HB 3773; Public Act 103-0804

In force

Prohibits employers from using AI that has a discriminatory effect on protected classes and from using ZIP codes as a proxy for protected characteristics; requires notice of AI use in employment decisions.

Effective: January 1, 2026

Primary source: Illinois General Assembly ↗

Biometric Information Privacy Act (BIPA)

740 ILCS 14

In force

Requires informed consent before collecting biometric identifiers such as faceprints or voiceprints, and provides a private right of action. Central to facial-recognition and voice-AI liability.

Effective: In force since 2008

Primary source: Illinois General Assembly ↗

Artificial Intelligence Safety Measures Act (AISMA)

SB 315, signed July 6, 2026

Phasing in

The third state frontier AI law on the California and New York template, covering models trained past 10^26 operations by developers above 500 million dollars in revenue: published safety frameworks, transparency reports, critical-incident reporting, whistleblower protections, and, uniquely, annual independent third-party compliance audits with published results. Preempts local AI regulation in Illinois.

Effective: January 1, 2027; audit and framework duties January 1, 2028

Primary source: Skadden analysis of AISMA ↗

Timeline

2008
BIPA enacted.
Jan 1, 2026
HB 3773 AI employment provisions take effect.
July 6, 2026
Artificial Intelligence Safety Measures Act signed.
January 1, 2027
AISMA takes effect; attorney-general enforcement and disclosure filings begin.
January 1, 2028
Frontier framework publication and annual independent audit duties begin.

Who it applies to

Employers operating in Illinois; BIPA reaches any private entity collecting biometric data from Illinois residents.

Penalties

BIPA allows statutory damages per violation through a private right of action; Human Rights Act violations are enforced by the Illinois Department of Human Rights.

Recent developments

July 6, 2026

Skadden

Illinois signs the third frontier AI law, the first anywhere to mandate independent audits

Governor Pritzker signed the Artificial Intelligence Safety Measures Act (SB 315), putting Illinois beside California and New York with the same frontier template: models trained past 10^26 operations, developers above 500 million dollars in revenue, safety frameworks, transparency reports, and incident reporting. Illinois goes one step further than either coast: from January 1, 2028, large frontier developers must retain an independent third party to audit their compliance annually and publish the results. The act takes effect January 1, 2027, enforced exclusively by the attorney general, with no private right of action, and it preempts local AI regulation inside the state.

Source ↗

January 1, 2026

King & Spalding

A wave of US state AI laws takes effect: California, Texas, Illinois

California's frontier transparency and training-data laws, Texas TRAIGA, and Illinois' AI employment amendment all took effect on the same day, a month after the federal preemption order. For now every one of them remains enforceable, and most follow the affected resident rather than the company's location.

Source ↗

Common questions

Does United States: Illinois have a comprehensive AI law?

United States: Illinois has a dedicated AI regime. Illinois regulates AI mainly through employment and biometric law rather than a dedicated AI act. HB 3773 amended the Illinois Human Rights Act to bar employers from using AI in ways that discriminate against protected classes. Separately, the Biometric Information Privacy Act (BIPA), which predates the AI wave, drives much of the country's biometric AI litigation.

What are the penalties for AI violations in United States: Illinois?

BIPA allows statutory damages per violation through a private right of action; Human Rights Act violations are enforced by the Illinois Department of Human Rights.

Who does AI regulation in United States: Illinois apply to?

Employers operating in Illinois; BIPA reaches any private entity collecting biometric data from Illinois residents.

Cite this page

Artificial Intelligence Regulations, "AI Regulation in Illinois," reviewed July 15, 2026, https://artificialintelligenceregulations.com/jurisdictions/illinois.html.

Entries state the position as of the review date and link to the primary text for verification.