Illinois Governor JB Pritzker signs AI Safety Measures Act into law

What Happened

Illinois Governor JB Pritzker has signed the AI Safety Measures Act into law, making Illinois the latest U.S. state to move ahead with its own AI governance framework rather than waiting for federal action. While the underlying announcement is brief, the signing itself is significant: it formally adds Illinois to a growing list of states—including Colorado, California, and others—that have chosen to legislate around AI risk in the absence of a comprehensive national law.

Why It Matters

The United States still has no unified federal AI regulatory regime comparable to the EU AI Act, which classifies AI systems by risk tier and imposes escalating obligations on developers and deployers of "high-risk" applications. In that vacuum, individual states have stepped in, creating a patchwork of rules that companies operating nationally must now track and comply with simultaneously. Illinois' new law adds another layer to that patchwork, and its practical effect will depend heavily on the specifics of enforcement, scope, and penalties—details that will matter enormously to AI developers, deployers, and enterprises using AI-driven decision systems in the state.

For businesses, this trend raises familiar compliance concerns: differing definitions of "AI system," different disclosure or audit requirements, and different liability standards from state to state make it harder to build a single national compliance program. Some industry groups have long lobbied for federal preemption precisely to avoid this scenario, arguing that a state-by-state approach slows innovation and raises costs. Consumer and civil-rights advocates, on the other hand, tend to welcome state action as a faster, more responsive way to address harms—such as algorithmic discrimination, unsafe deployment in critical sectors, or lack of transparency—while Congress remains gridlocked on comprehensive AI legislation.

The EU Comparison

Illinois' move invites direct comparison with the EU AI Act, which took a more centralized, comprehensive approach: a single risk-based framework covering the entire bloc, with detailed obligations for high-risk systems in areas like employment, credit, law enforcement, and critical infrastructure. The EU's model offers predictability across 27 member states, something the U.S. currently lacks as it accumulates a growing number of state-level statutes—Illinois being merely the newest entrant. Whether U.S. states converge toward EU-style harmonization, or continue diverging into a genuinely fragmented regulatory landscape, will shape how AI companies design compliance programs going forward.

What to Watch

Key questions now include how Illinois defines covered AI systems, what enforcement mechanisms and penalties apply, and how quickly other states follow suit or attempt to harmonize with existing frameworks like Colorado's AI Act. The law's real impact will become clearer as implementing regulations and enforcement guidance emerge in the coming months.