Illinois becomes first state to audit AI giants
Daily Briefing | July 8, 2026
Illinois moved first. On July 6, Governor JB Pritzker signed SB 315, the Artificial Intelligence Safety Measures Act, making Illinois the first state to require independent audits of the largest AI developers and to write worker whistleblower protections into AI safety law. Congress is still debating whether to preempt exactly this kind of state action through the proposed Great American AI Act. Illinois decided not to wait.
By the Numbers
$500 million: the annual revenue threshold that defines a “large frontier developer” covered by the Illinois law.
72 hours: the window to report a critical safety incident to the state, dropping to 24 hours when the risk involves imminent death or serious injury.
$1 million and $3 million: the civil penalties for a first violation and each violation after it.
January 1, 2028: when the audit, disclosure, and whistleblower requirements take effect.
Policy and Government
Illinois becomes the first state to audit the biggest AI developers
SB 315 requires any AI developer with at least $500 million in annual revenue to write, publish, and follow a safety plan for preventing catastrophic misuse of its models, and to open those practices to independent third-party audits. No state had required outside audits before. Companies must report critical safety incidents to the state within 72 hours, or within a day when the danger is imminent. The law also reaches inside these companies to protect the people who work there. It bans policies that would stop employees from reporting safety concerns to state or federal authorities, and it requires an anonymous internal channel for workers who believe in good faith that their employer is creating a public safety risk. Pritzker framed the bill as a check on “the tech bros.” Penalties run to $1 million for a first violation and $3 million after that, with the requirements taking effect January 1, 2028.
Source: The Washington Post
Why it matters: Most AI regulation debated in 2026 targets consumers and hiring. Illinois went further and regulated conditions inside the AI labs themselves, giving engineers and researchers legal cover to raise safety alarms. As more states write AI rules, worker voice and internal reporting rights are moving into the compliance column beside disclosure and audit duties.
What Workforce Leaders Are Watching
If states keep attaching whistleblower and internal-reporting rights to AI laws, which function owns that compliance: Legal, HR, or a standalone AI governance office?
The federal Great American AI Act would preempt state rules like SB 315. Which layer actually governs AI at work by 2028, Springfield or Washington?
Illinois wrote safety-reporting rights specifically for companies building frontier models. Should employers that deploy AI, rather than build it, expect similar internal-reporting mandates next?
With audit and incident-reporting duties starting January 1, 2028, what should companies building or buying frontier models do over the next 18 months to be ready?
This briefing was prepared automatically by the Workforce Rewired research assistant. All stories include direct source links.