Is a frontier developer, in Illinois

P.A. 104-0538 (SB 315, 104th Gen. Assembly), enacting a new Act and amending 5 ILCS 140/7.5 and 740 ILCS 174/15 · Read the law's page

• A frontier developer is one that trains, or initiates the training of, a frontier model using more than 10^26 integer or floating-point operations of computing power; a large frontier developer is a frontier developer whose group had annual gross revenues over $500,000,000 in the preceding calendar year, and carries four of the duties below that the rest do not.
• Before or when you deploy a new or substantially modified frontier model, publish on your website a transparency report giving your website, a way for a person to reach you, the model's release date, its supported languages and output modalities, its intended uses, and any generally applicable restrictions on its use.
• If you are a large frontier developer, add to that transparency report summaries of your catastrophic-risk assessments for the model, their results, the extent of any third-party evaluator involvement, and the other steps you took to meet your frontier AI framework for it.
• If you are a large frontier developer, from 1 January 2028 write, implement, comply with and publish on your website a frontier AI framework covering catastrophic-risk assessment, mitigations, cybersecurity, internal governance, third-party evaluations, and risks from your own internal use of your frontier models.
• If you are a large frontier developer, obtain an annual independent third-party audit of your compliance, and meet the Act's access, retention, and publication requirements for the audit results. Within 30 days of receiving the independent audit report, publish a high-level summary of the audit findings and a redacted copy of the report on your website and transmit the redacted report to the Agency and the Attorney General.
• Report a critical safety incident to the Agency, the Illinois Emergency Management Agency and Office of Homeland Security, and to the Attorney General within 72 hours of learning facts sufficient to establish a reasonable belief that a critical safety incident has occurred.
• Within 24 hours of discovering that a critical safety incident poses an imminent risk of death or serious physical injury, disclose it to an appropriate authority, including a law enforcement or public safety agency with jurisdiction over it.
• Do not adopt or enforce a rule, policy or contract that stops a covered employee disclosing, and do not retaliate against a covered employee for disclosing, information they have reasonable cause to believe shows that your activities pose a specific and substantial danger to public health or safety from a catastrophic risk, or that you violated the Act.
• If you are a large frontier developer, provide a reasonable internal process through which a covered employee can disclose that kind of information to you anonymously, and give that employee a monthly update on your investigation and on what you did in response.