Illinois HB 3506

• Authority: Illinois
• Parent authority: State governments
• Jurisdiction: United States
• Collections: Editors' Picks;U.S. state and local documents
• Most recent activity: Proposed
• Most recent activity date: 2025-02-18

Risk subdomain coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the risk subdomain are explicitly described.

• AI system security vulnerabilities
• Cyberattacks, weapon development or use
• Governance failure
• AI pursuing its own goals
• AI possessing dangerous capabilities
• Lack of capability or robustness
• Lack of transparency or interpretability

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Disinformation, surveillance, and influence at scale
• Fraud, scams, and targeted manipulation
• Loss of human agency and autonomy
• Competitive dynamics

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has good coverage of approximately 8-10 subdomains, with strong focus on malicious actors (4.1, 4.2), AI system security (2.2), competitive dynamics (6.4), governance failure (6.5), and AI safety failures (7.1, 7.2, 7.3). Coverage is concentrated in security, misuse prevention, and AI safety domains.

Sector coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the sector are described.

• Information
• Scientific Research & Development Services
• Educational Services
• Health Care & Social Assistance
• National Security

All other sectors had no coverage in this document.

Sectors Summary

This legislation applies horizontally across all sectors where foundation models meeting the $100M compute threshold are developed. It does not target specific economic sectors but rather regulates AI developers regardless of their industry, making it a cross-sectoral governance framework focused on high-capability AI systems.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding legislative bill (HB3506) introduced to the Illinois General Assembly that establishes mandatory requirements with civil penalties up to $1,000,000 for violations and enforcement by the Attorney General.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Illinois General Assembly; Rep. Daniel Didech
• Summary: The bill was introduced to the 104th General Assembly of the State of Illinois by Representative Daniel Didech, as indicated in the header and synopsis.

Target

• Entity Types: AI_Developer
• Summary: The Act explicitly targets 'developers' defined as persons that have trained at least one foundation model with computational power costing at least $100,000,000. The obligations apply to developers of foundation models meeting this threshold.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of Illinois
• Summary: The Attorney General is explicitly designated as the enforcement authority with power to bring civil actions, assess penalties, and seek injunctive relief for violations of the Act.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Attorney General of Illinois; third-party auditors
• Summary: The Attorney General has inspection rights for unredacted documents. Additionally, developers must retain reputable third-party auditors annually to assess compliance with safety and security protocols.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Collect and Process Data
• Build and Use Model
• Verify and Validate
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document covers multiple lifecycle stages with primary focus on Build and Use Model, Verify and Validate, Deploy, and Operate and Monitor stages. It addresses foundation model development, testing, deployment decisions, and ongoing monitoring through risk assessments and audits.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Models
• Foundation Models
• Compute Threshold
• Generative AI

Technical Scope Summary

The document explicitly defines and regulates 'foundation models' and 'artificial intelligence models.' It does not specifically mention frontier AI, general purpose AI, task-specific AI, generative AI, predictive AI, or open-weight models. It does reference a compute threshold of $100,000,000 in computational power costs for training.