Illinois SB2203

• Authority: Illinois
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Proposed
• Most recent activity date: 2025-02-07

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• Unfair discrimination and misrepresentation
• Unequal performance across groups
• Governance failure
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy
• Overreliance and unsafe use
• Loss of human agency and autonomy
• Lack of capability or robustness

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 5-6 subdomains, with strong focus on unfair discrimination (1.1, 1.3), privacy compromise (2.1), governance failure (6.5), and lack of transparency (7.4). Coverage is concentrated in discrimination prevention, privacy protection, and AI system governance domains.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Finance & Insurance
• Management, Administrative & Support Services
• Educational Services
• Health Care & Social Assistance
• Public Administration (excl. National Security)

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Trade, Transportation & Utilities
• Real Estate, Rental & Leasing

All other sectors had no coverage in this document.

Sectors Summary

The document governs AI use across multiple sectors through its regulation of automated decision tools making consequential decisions. It has comprehensive coverage of employment, education, housing, healthcare, financial services, and public administration sectors, with explicit mentions of criminal justice, legal services, and utilities.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative act with mandatory obligations, enforcement mechanisms including civil actions and administrative fines, and specific penalties for non-compliance. The document uses mandatory language throughout and establishes clear legal obligations for deployers.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Illinois General Assembly; People of the State of Illinois
• Summary: The document is a bill enacted by the Illinois General Assembly, representing the legislative body of the State of Illinois. The opening text explicitly identifies the proposing authority.

Target

• Entity Types: AI_Deployer
• Summary: The document explicitly targets 'deployers' of automated decision tools, defined as persons, partnerships, state or local government agencies, or corporations that use automated decision tools to make consequential decisions. The obligations apply specifically to entities deploying AI systems.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Illinois Attorney General
• Summary: The Attorney General is explicitly designated as the primary enforcement authority with power to impose administrative fines, receive impact assessments, and enforce violations under the Consumer Fraud and Deceptive Business Practices Act. Additionally, affected individuals can bring civil actions.

Monitor

• Entity Types: AI_Governance_Actor, AI_Deployer
• Entities: Illinois Attorney General
• Summary: The Attorney General receives and reviews impact assessments from deployers and can share them with other state entities. Deployers themselves are also required to conduct ongoing monitoring through annual reviews and designated compliance employees.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily focuses on the Deploy and Operate and Monitor stages of the AI lifecycle. It requires impact assessments before deployment and ongoing monitoring through governance programs, annual reviews, and designated compliance officers. There is minimal coverage of earlier stages like data collection or model building.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems
• Generative AI

Technical Scope Summary

The document explicitly defines and covers AI systems and automated decision tools. It includes generative AI systems in its definition. There is no mention of frontier AI, general purpose AI, foundation models, compute thresholds, or open-weight models. The focus is on automated decision tools used for consequential decisions regardless of AI type.