Regulon — IL-HB-4705 · IL HB 4705 (AI Public Safety & Child Protection Transparency)

WHAT THIS BILL REGULATES · 8 REQUIREMENT TYPES

How Is This Bill Enforced

Enforcement Authority

Attorney General enforcement exclusively. Civil penalties are recovered in a civil action brought by the Attorney General. No private right of action. The Attorney General also has rulemaking authority to update definitions and create alternative compliance pathways.

Private Right of Action

No private right of action. Enforcement is exclusive to the designated authority.

Penalties

Large frontier developers: civil penalty up to $1,000,000 per violation dependent on severity. Large chatbot providers: civil penalty up to $50,000 per violation dependent on severity. No private damages, no injunctive relief provision for private parties, no attorney fees provision.

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text

Analysis & Obligations

Section 1

Short title

This Act may be cited as the Artificial Intelligence Public Safety and Child Protection Transparency Act.

Establishes the short title of the Act as the Artificial Intelligence Public Safety and Child Protection Transparency Act. No compliance obligations arise from this section.

Section 5

Legislative findings

(a)–(m) Artificial intelligence, including new advances in foundation models, has the potential to catalyze innovation and the rapid development of a wide range of benefits for Illinoisans and the Illinois economy, including advances in medicine, agriculture, and climate science, and to push the bounds of human creativity and capacity. (b) Targeted interventions to support effective artificial intelligence governance should balance the technology's benefits and the potential for material risks. (c) In building a robust and transparent evidence environment, policymakers can align incentives to simultaneously protect consumers, leverage industry expertise, and recognize leading safety practices. (d) As industry actors conduct internal research on their technologies' impacts, public trust in these technologies would significantly benefit from access to information regarding, and increased awareness of, frontier artificial intelligence capabilities. (e) Greater transparency can also advance accountability, competition, and public trust. (f) Whistleblower protections and public-facing information sharing are key instruments to increase transparency. (g) Incident reporting systems enable monitoring of the post-deployment impacts of artificial intelligence. (h) Unless they are developed with careful diligence and reasonable precaution, there is concern that advanced artificial intelligence systems could have capabilities that pose catastrophic risks from both malicious uses and malfunctions. (i) With the frontier of artificial intelligence rapidly evolving, there is a need for legislation to track the frontier of artificial intelligence research. (j) While the major artificial intelligence developers have already voluntarily established the creation, use, and publication of frontier artificial intelligence frameworks as an industry best practice, mandatory, standardized, and objective reporting by frontier developers is required to provide the government and the public with timely and accurate information. (k) Timely reporting of critical safety incidents to the government is essential to ensure that public authorities are promptly informed of ongoing and emerging risks to public safety. (l) In the future, foundation models developed by smaller companies or that are behind the frontier may pose significant catastrophic risk, and additional legislation may be needed at that time. (m) It is the intent of the General Assembly to create more transparency, but collective safety will depend in part on frontier developers taking due care in their development and deployment of frontier models proportional to the scale of the foreseeable risks.

Sets forth the General Assembly's findings and declarations regarding the benefits and risks of artificial intelligence, including potential for catastrophic harm from frontier models, the value of transparency and whistleblower protections, and the intent to create targeted obligations for frontier developers and large chatbot providers without burdening smaller companies. No compliance obligations arise from this section.

Section 10

Definitions

As used in this Act: "Affiliate" means a person controlling, controlled by, or under common control with a specified person, directly or indirectly, through one or more intermediaries. "Artificial intelligence model" means an engineered or machine-based system that varies in its level of autonomy and that can, for explicit or implicit objectives, infer from the input it receives how to generate outputs that can influence physical or virtual environments. "Catastrophic risk" means a foreseeable and material risk that a frontier developer's development, storage, use, or deployment of a frontier model will materially contribute to the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property arising from a single incident involving a frontier model doing the following: (1) providing expert-level assistance in the creation or release of a chemical, biological, radiological, or nuclear weapon; (2) engaging in conduct with no meaningful human oversight, intervention, or supervision that is either a cyberattack or, if the conduct had been committed by a human, would constitute the crime of murder, assault, extortion, or theft, including theft by false pretense; or (3) evading the control of its frontier developer or user. "Catastrophic risk" does not include a foreseeable and material risk from the following: (1) information that a frontier model outputs if the information is otherwise publicly accessible in a substantially similar form from a source other than a foundation model; (2) lawful activity of the federal government; or (3) harm caused by a frontier model in combination with other software if the frontier model did not materially contribute to the harm. "Child safety incident" means death or bodily injury to a minor resulting from the materialization of a child safety risk. "Child safety risk" means a material and foreseeable risk that a frontier developer's foundation model, when used as part of a covered chatbot operated by the frontier developer, will engage in behavior when conversing with a minor that, if it had been engaged in by a human, would be deemed to intentionally or recklessly do the following: (1) cause death or bodily injury to that minor, including as a result of self-harm; or (2) cause damage to mental health that constitutes severe emotional distress. "Covered chatbot" means a service that: (1) allows an ordinary person to converse with and have conversations where humanlike responses are generated by a foundation model; (2) is foreseeably likely to be accessed by minors; and (3) has at least 1,000,000 monthly active users. "Covered risk" means a catastrophic risk or a child safety risk. "Critical safety incident" means the following: (1) unauthorized access to, modification of, inadvertent release of, or exfiltration of, the model weights of a frontier model; (2) the death of, or serious injury to, more than 50 people or more than $1,000,000,000 in damage to, or loss of, property resulting from the materialization of a catastrophic risk; (3) loss of control of a frontier model that causes death, bodily injury, or that demonstrates materially increased catastrophic risk; or (4) the use of deceptive techniques by a frontier model against its frontier developer to subvert the controls or monitoring of its frontier developer outside of the context of an evaluation designed to elicit this behavior and in a manner that demonstrates materially increased catastrophic risk. "Deploy" means to make a frontier model available to a third party for use, modification, copying, or combination with other software. "Deploy" does not include making a frontier model available to a third party for the primary purpose of developing or evaluating the frontier model. "Employee" has the meaning set forth in the Whistleblower Act. "Foundation model" means an artificial intelligence model that is: (1) trained on a broad data set; (2) designed for generality of output; and (3) adaptable to a wide range of distinctive tasks. "Frontier developer" means a person who has trained, or initiated the training of, a frontier model, with respect to which the person has used, or intends to use, at least as much computing power to train the frontier model as would meet the technical specifications described in the definition of "frontier model". "Frontier developer" does not include accredited colleges and universities to the extent that the colleges and universities are engaging in academic research. For the purpose of this definition, if a person subsequently transfers full intellectual property rights of a frontier model to another person, including the right to resell the model, and retains none of those rights, then the receiving person shall be considered the frontier developer with respect to that frontier model. "Frontier model" means a foundation model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations. The quantity of computing power described in this definition shall include computing for the original training run and for any subsequent fine-tuning, reinforcement learning, or other material modifications the developer applies to a preceding foundation model. "Large chatbot provider" means a provider who makes a covered chatbot available in this State and who, together with the provider's affiliates, collectively have an annual revenue of at least $25,000,000. "Large frontier developer" means a frontier developer who, together with the large frontier developer's affiliates, collectively have an annual revenue of at least $500,000,000. "Minor" means an individual younger than 18 years old. "Model weight" means a numerical parameter in a frontier model that is adjusted through training and that helps determine how inputs are transformed into outputs. "Property" means tangible or intangible property. "Public safety and child protection plan" means a documented technical and organizational protocol to manage, assess, and mitigate covered risks. "Safety incident" means a child safety incident or a critical safety incident.

Defines all key terms used throughout the Act, including the three tiers of covered entities — frontier developer, large frontier developer, and large chatbot provider — and the two covered platform types: frontier model (defined by a ≥10^26 FLOP compute threshold) and covered chatbot (≥1M monthly users, foreseeably accessed by minors, generating humanlike responses via a foundation model). Also defines the two categories of covered risk — catastrophic risk (CBRN, autonomous cyberattack/crime, loss of control causing mass casualties or ≥$1B property damage) and child safety risk (death, bodily injury, or severe emotional distress to a minor through chatbot interaction). No compliance obligations arise from this section.

Section 15

Public safety and child protection plans

DeployerDeveloper

(a)(1) 1 A large frontier developer or large chatbot provider shall write, implement, comply with, and clearly and conspicuously publish on its website a public safety and child protection plan that describes in detail: (1) For a large frontier developer only, how the large frontier developer: (A) defines and assesses thresholds used by the large frontier developer to identify and assess whether a frontier model has capabilities that could pose a catastrophic risk, which may include multiple-tiered thresholds; (B) applies mitigations to address the potential for catastrophic risks based on the results of the assessments undertaken in accordance with subparagraph (A); (C) reviews assessments of catastrophic risk and adequacy of mitigations of catastrophic risk as part of the decision to deploy a frontier model or use it extensively internally; (D) uses third parties to assess the potential for catastrophic risks and the effectiveness of mitigations of catastrophic risks; (E) implements cybersecurity practices to secure unreleased frontier model weights from unauthorized modification or transfer by internal or external parties; and (F) assesses and manages catastrophic risk resulting from the internal use of its frontier models, including risks resulting from a frontier model circumventing oversight mechanisms or being used for artificial intelligence research and development in a manner that could materially increase catastrophic risk.

(a)(2) 2 For a large chatbot provider only, how the large chatbot provider: (A) assesses potential for child safety risks; (B) applies mitigations to address the potential for child safety risks based on the results of the assessments undertaken in accordance with subparagraph (A); and (C) uses third parties to assess the potential for child safety risks and the effectiveness of mitigations of child safety risks.

(a)(3) 3 For both large frontier developers and large chatbot providers, how the large frontier developer or large chatbot provider: (A) incorporates national standards, international standards, and industry-consensus best practices into its public safety and child protection plan; (B) revisits and updates the public safety and child protection plan, including any criteria that trigger updates and how the large frontier developer determines when its foundation models or frontier models are substantially modified enough to require disclosures in accordance with subsection (d) or subsection (e); (C) identifies and responds to safety incidents; and (D) institutes internal governance practices to ensure implementation of these processes.

(b) 1 A large frontier developer shall write its public safety and child protection plan so that, if successfully implemented, it would prevent unreasonable catastrophic risk.

(c) 4 If a large frontier developer or large chatbot provider makes a material modification to its public safety and child protection plan, the large frontier developer or large chatbot provider shall clearly and conspicuously publish the modified public safety and child protection plan and a justification for that modification within 30 days after the modification is made.

(d) 5 Before, or concurrently with, integrating a new foundation model, or a version of an existing foundation model that has been substantially modified, into a covered chatbot operated by a large chatbot provider, a large chatbot provider shall conspicuously publish on its website summaries of the following: (1) all assessments of child safety risks conducted in accordance with the large chatbot provider's public safety and child protection plan; (2) the results of those assessments; (3) the extent to which third-party evaluators were involved; and (4) other steps taken to fulfill the requirements of the public safety and child protection plan with respect to child safety risks.

(e) 6 Before, or concurrently with, deploying a new frontier model or a version of an existing frontier model that a large frontier developer has substantially modified, a large frontier developer shall implement appropriate safeguards to prevent unreasonable catastrophic risk and conspicuously publish on its website summaries of the following: (1) all assessments of catastrophic risks from the frontier model conducted in accordance with the large frontier developer's public safety and child protection plan; (2) the results of those assessments; (3) the extent to which third-party evaluators were involved; and (4) other steps taken to fulfill the requirements of the public safety and child protection plan with respect to catastrophic risks from the frontier model. A large frontier developer that publishes the information described in this subsection as part of a larger document, including a system card or model card, shall be deemed in compliance with this subsection.

(f) 7 A large frontier developer shall not use or deploy a frontier model if doing so would pose unreasonable catastrophic risk.

(g) 8 A large frontier developer or large chatbot provider shall not make a materially false or misleading statement or omission about covered risks from its activities or its management of covered risks. A large frontier developer or large chatbot provider shall not make a materially false or misleading statement or omission about its implementation of, or compliance with, its public safety and child protection plan. This subsection does not apply to a statement that was made in good faith and was reasonable under the circumstances.

(h) 9 When a large frontier developer or large chatbot provider publishes documents to comply with this Section, the large frontier developer or large chatbot provider may make redactions to those documents that are necessary to protect the large frontier developer's or large chatbot provider's trade secrets, the large frontier developer's or large chatbot provider's cybersecurity, public safety, or the national security of the United States or to comply with any State or federal law. If a large frontier developer or large chatbot provider redacts information in a document under this subsection, the large frontier developer or large chatbot provider shall describe the character and justification of the redaction in any published version of the document to the extent permitted by the concerns that justify redaction and shall retain the unredacted information for 5 years.

This is the core operative section of the Act. It requires large frontier developers and large chatbot providers to write, implement, comply with, and publicly publish a public safety and child protection plan. The plan's required content differs by entity type: large frontier developers must detail catastrophic risk thresholds, mitigations, deployment-gate review, third-party evaluation, cybersecurity, and internal-use risk management; large chatbot providers must detail child safety risk assessment, mitigations, and third-party evaluation. Both must describe standards incorporation, plan update criteria, incident response, and governance.

The section also imposes pre-deployment disclosure obligations — large chatbot providers must publish child safety risk assessment summaries before integrating new or substantially modified foundation models, and large frontier developers must implement safeguards against unreasonable catastrophic risk and publish catastrophic risk assessment summaries before deploying new or substantially modified frontier models. A safe harbor permits publication within a model card or system card. Large frontier developers face an absolute prohibition on deploying a frontier model that would pose unreasonable catastrophic risk. Both entity types are prohibited from making materially false or misleading statements about covered risks or plan compliance, subject to a good-faith defense. Published documents may be redacted for trade secrets, cybersecurity, public safety, or national security, with unredacted versions retained for 5 years.

Compliance actions 9 items

Large frontier developers must write, implement, comply with, and publicly publish a safety plan detailing how they (1) define and assess catastrophic risk thresholds, (2) apply mitigations, (3) review risk assessments before deployment or extensive internal use, (4) use third parties to evaluate catastrophic risks, (5) implement cybersecurity for unreleased model weights, and (6) manage catastrophic risk from internal use. The plan must, if successfully implemented, prevent unreasonable catastrophic risk.

S-03.1

Large chatbot providers must write, implement, comply with, and publicly publish a safety plan detailing how they assess child safety risks, apply mitigations to address those risks, and use third parties to evaluate the potential for and effectiveness of mitigations of child safety risks.

S-01.1

Large frontier developers and large chatbot providers must describe in their published safety plan how they incorporate national, international, and industry-consensus standards; how and when they update the plan (including criteria for triggering updates upon substantial model modifications); how they identify and respond to safety incidents; and how they institute internal governance practices to ensure plan implementation.

G-01.1

Large frontier developers and large chatbot providers must publish any material modification to their public safety and child protection plan, along with a justification for the modification, within 30 days after the modification is made.

G-02.1

Large chatbot providers must, before or concurrently with integrating a new or substantially modified foundation model into a covered chatbot, publish on their website summaries of all child safety risk assessments, their results, the extent of third-party evaluator involvement, and other steps taken to address child safety risks.

G-02.3

Large frontier developers must, before or concurrently with deploying a new or substantially modified frontier model, (1) implement appropriate safeguards to prevent unreasonable catastrophic risk and (2) publish on their website summaries of all catastrophic risk assessments, their results, the extent of third-party evaluator involvement, and other steps taken to address catastrophic risks. Publication within a system card or model card satisfies this requirement.

G-02.3

Large frontier developers must not use or deploy a frontier model if doing so would pose unreasonable catastrophic risk.

S-03.3

Large frontier developers and large chatbot providers must not make materially false or misleading statements or omissions about covered risks from their activities, their management of covered risks, or their implementation of or compliance with their public safety and child protection plan. A good-faith defense applies to statements reasonable under the circumstances.

CP-01

Large frontier developers and large chatbot providers may redact published documents for trade secrets, cybersecurity, public safety, national security, or legal compliance, but must describe the character and justification of each redaction in the published version and must retain unredacted information for 5 years.

G-01.3

Section 20

Reporting of safety incidents

DeployerDeveloper

(a) The Attorney General shall establish a mechanism to be used by a frontier developer, a large chatbot provider, or a member of the public to report a safety incident that includes the following: (1) the date of the safety incident; (2) the reasons the incident qualifies as a safety incident; and (3) a short and plain statement describing the safety incident.

(b) 10 A frontier developer shall report any critical safety incident pertaining to one of its frontier models to the Attorney General within 15 days after discovering the critical safety incident.

(c) 11 If a frontier developer discovers that a critical safety incident poses an imminent risk of death or serious physical injury, the frontier developer shall disclose that incident within 24 hours after discovering the critical safety incident to an authority, including any law enforcement agency or public safety agency with jurisdiction, that is appropriate based on the nature of that incident and as required by law.

(d) 12 A large chatbot provider shall report any child safety incident pertaining to one of its covered chatbots to the Attorney General within 15 days after discovering the child safety incident.

(e)–(f) 13 The Attorney General shall establish a mechanism to be used by a large frontier developer to confidentially submit summaries of any assessments of the potential for catastrophic risk resulting from internal use of its frontier models. (f) A large frontier developer shall transmit to the Attorney General a summary of any assessment of catastrophic risk resulting from internal use of its frontier models no less frequently than every 3 months.

(g) The Attorney General may transmit reports of safety incidents, summaries of assessments of the potential for catastrophic risk from internal use, and reports from employees to the General Assembly, the Governor, the federal government, or an appropriate State agency. The Attorney General shall consider any risks related to trade secrets, public safety, cybersecurity, or national security when transmitting reports.

Requires the Attorney General to establish a public-facing mechanism for reporting safety incidents and a confidential mechanism for large frontier developers to submit internal-use catastrophic risk assessment summaries. Frontier developers must report critical safety incidents to the Attorney General within 15 days, with an accelerated 24-hour timeline for incidents posing imminent risk of death or serious physical injury. Large chatbot providers must report child safety incidents within 15 days. Large frontier developers must transmit quarterly summaries of catastrophic risk assessments from internal frontier model use. The Attorney General may share reports and assessments with the General Assembly, Governor, federal government, or state agencies, subject to trade secret and security considerations.

Compliance actions 4 items

Frontier developers must report any critical safety incident pertaining to one of their frontier models to the Attorney General within 15 days after discovering the incident.

R-01.1

Frontier developers must, upon discovering that a critical safety incident poses an imminent risk of death or serious physical injury, disclose the incident within 24 hours to an appropriate authority, including any law enforcement or public safety agency with jurisdiction.

R-01.1

Large chatbot providers must report any child safety incident pertaining to one of their covered chatbots to the Attorney General within 15 days after discovering the incident.

R-01.1

Large frontier developers must transmit to the Attorney General a summary of any assessment of catastrophic risk resulting from internal use of their frontier models at least every 3 months.

R-02.1

Section 25

Rulemaking; definitions

(a)–(c) On or before January 1, 2028, and annually thereafter, the Attorney General shall assess recent evidence and developments relevant to the purposes of this Act and may adopt rules to update the following definitions for the purposes of this Act to ensure that they accurately reflect technological developments, scientific literature, and widely accepted national and international standards: (1) "Frontier model" so that it applies to foundation models at the frontier of artificial intelligence development. (2) "Frontier developer" so that it applies to developers of frontier models who are themselves at the frontier of artificial intelligence development. (3) "Large frontier developer" so that it applies to well-resourced frontier developers. (4) "Large chatbot provider" so that it applies to well-resourced companies developing covered chatbots that may pose child safety risks. (b) In adopting rules under this Section, the Attorney General shall take into account the following factors. (c) The Attorney General shall align any rules adopted under this Section with a definition adopted in a federal law or regulation, to the extent that it is consistent with the purposes of this Act.

Grants the Attorney General authority to assess recent evidence and developments annually beginning January 1, 2028 and to adopt rules updating the definitions of frontier model, frontier developer, large frontier developer, and large chatbot provider to reflect technological developments and standards. The section prescribes six factors the Attorney General must consider when adopting rules and requires alignment with any applicable federal definitions. This section imposes no direct compliance obligation on covered entities but is critical context for understanding how the Act's scope may evolve.

Section 30

Protection of whistleblowers

DeployerDeveloper

(a) 14 A frontier developer or large chatbot provider shall not make, adopt, enforce, or enter into a rule, regulation, policy, or contract that prevents an employee from making a disclosure protected under the Whistleblower Act.

(b) 15 A large frontier developer shall provide a reasonable internal process through which an employee may anonymously disclose information to the large frontier developer if the employee has a good faith belief that the information discloses a substantial and specific danger to employees, public health, or safety or a violation of this Act, including a monthly update to the person who made the disclosure regarding the status of the large frontier developer's investigation of the disclosure and the actions taken by the large frontier developer in response to the disclosure.

(c)–(d) 16 Except as provided in subsection (d), the disclosures and responses of the process required by this Section shall be shared with officers and directors of the large frontier developer at least once each quarter. (d) If an employee has alleged wrongdoing by an officer or director of the large frontier developer in a disclosure or response, subsection (c) shall not apply with respect to that officer or director.

Establishes whistleblower protections across two tiers. All frontier developers and large chatbot providers are prohibited from adopting rules, policies, or contracts that prevent employees from making disclosures protected under the Illinois Whistleblower Act. Large frontier developers face additional obligations: they must provide an anonymous internal reporting channel for employees who have a good-faith belief that information discloses a substantial and specific danger to employees, public health, or safety, or a violation of this Act. The channel must include monthly status updates to the disclosing employee. Disclosures and responses must be shared with officers and directors quarterly, except where the disclosure alleges wrongdoing by that officer or director.

Compliance actions 3 items

Frontier developers and large chatbot providers must not adopt, enforce, or enter into any rule, regulation, policy, or contract that prevents an employee from making a disclosure protected under the Illinois Whistleblower Act.

G-03.3

Large frontier developers must provide an anonymous internal reporting process through which employees may disclose information they have a good-faith belief reveals a substantial and specific danger to employees, public health, or safety, or a violation of this Act. The process must include monthly status updates to the disclosing employee on the investigation and actions taken.

G-03.1

Large frontier developers must share whistleblower disclosures and responses with officers and directors at least once each quarter, except that disclosures alleging wrongdoing by a specific officer or director must not be shared with that officer or director.

G-03.2

Section 35

Third-party audits

Developer

(a) 17 At least once every calendar year, a large frontier developer shall retain a reputable third-party auditor to produce a report assessing the following: (1) whether the large frontier developer has complied with its public safety plan and any instances of noncompliance; (2) any instances where the large frontier developer's public safety plan has not been stated clearly enough to determine whether the large frontier developer has complied; and (3) whether redactions made by the large frontier developer in documents published in accordance with this Act are reasonable and whether any statements made by the large frontier developer may be false or misleading.

(b) 17 A large frontier developer shall allow the third-party auditor access to all materials produced to comply with this Act and any other materials reasonably necessary to perform the assessment required under subsection (a).

(c) 17 The large frontier developer shall retain the auditor's report for 5 years and allow the Attorney General to inspect the unredacted version of the report upon request.

(d) 17 In conducting the audit, the auditor shall employ or contract one or more individuals with expertise in corporate compliance and one or more individuals with technical expertise in the safety of foundation models.

Requires large frontier developers to retain a reputable third-party auditor annually to assess compliance with the public safety plan, identify instances where the plan is insufficiently clear to determine compliance, and evaluate whether redactions are reasonable and whether any published statements may be false or misleading. The auditor must employ individuals with expertise in both corporate compliance and foundation model safety. The large frontier developer must grant the auditor full access to compliance materials and retain audit reports for 5 years, with unredacted reports available to the Attorney General on request.

Compliance actions 1 item

Large frontier developers must annually retain a reputable third-party auditor (with corporate compliance and foundation model safety expertise) to assess (1) compliance with the public safety plan and instances of noncompliance, (2) plan clarity, and (3) reasonableness of redactions and accuracy of published statements. The developer must grant the auditor full access to compliance materials, retain the audit report for 5 years, and make the unredacted report available to the Attorney General on request.

G-01.5

Section 40

Civil penalties

(a)–(c) A large frontier developer that violates this Act shall be subject to a civil penalty in an amount dependent upon the severity of the violation that does not exceed $1,000,000 per violation. (b) A large chatbot provider that violates this Act shall be subject to a civil penalty in an amount dependent upon the severity of the violation that does not exceed $50,000 per violation. (c) A civil penalty described in this Section shall be recovered in a civil action brought by the Attorney General.

Establishes the penalty structure for violations. Large frontier developers face civil penalties up to $1,000,000 per violation, while large chatbot providers face up to $50,000 per violation, both dependent on severity. All civil penalties are recovered in civil actions brought exclusively by the Attorney General. No private right of action is created.

Section 45

Loss of equity

The loss of value of equity does not count as damage to or loss of property for the purposes of this Act.

Clarifies that loss of value of equity does not count as damage to or loss of property for purposes of the Act. This is a scope limitation on the definitions of catastrophic risk and critical safety incident, which both use a $1 billion property damage threshold. No compliance obligation arises from this section.

Section 50

Compliance with other laws

(a)–(f) The Attorney General may adopt rules creating alternative compliance pathways for frontier developers or large chatbot providers that comply with a federal law, regulation, or guidance document or a law of another state of the United States. (b) A rule adopted under this Section shall: (1) Specify the provisions of this Act for which the alternative compliance pathway is being established. (2) Specify the federal law, regulation, or guidance document, or the law of another state, compliance with which shall serve as the alternative compliance pathway for the provisions specified under paragraph (1). The federal law, regulation or guidance document or the law of another state shall be substantially equivalent to, or more protective against catastrophic risk than, the provisions of this Act specified under paragraph (1). (c) If a rule adopted under this Section identifies, as described in paragraph (1) of subsection (b), a provision of this Act that requires reporting to the State and if the alternative compliance pathway requires reporting to the federal government, the rule may, but need not, continue to require reporting to the State. The rule shall not consider reporting to another state to be sufficient for compliance with the relevant provision of this Act. (d) A rule adopted under this Section may establish steps frontier developers or large chatbot providers must take to demonstrate their compliance with the alternative compliance pathway if it would otherwise be challenging for the State to verify compliance, such as the submission of documentation to the State. (e) A frontier developer or large chatbot provider that intends to make use of an alternative compliance pathway created by rule under this Section shall declare its intent to do so to the Attorney General. After declaring its intent, a frontier developer or large chatbot provider shall be deemed in compliance with the provision of this Act identified by the rule under paragraph (1) of subsection (b) to the extent that the frontier developer or large chatbot provider complies with the requirements of the rule and meets the standards of, or complies with the requirements imposed or stated by, the federal law, regulation, or guidance document or law of another state identified by the rule under paragraph (2) of subsection (b) until the frontier developer or large chatbot provider declares the revocation of that intent to the Attorney General or the Attorney General revokes the rule in accordance with subsection (f). (f) The Attorney General shall revoke a rule adopted under this Section if the conditions specified by this Section no longer apply.

Authorizes the Attorney General to create alternative compliance pathways by rule for frontier developers or largechatbot providers that comply with substantially equivalent or more protective federal law, regulation, guidance, or law of another state. Rules must specify which provisions of this Act are covered and which external law serves as the alternative pathway. Reporting to another state alone is insufficient — federal reporting may substitute for state reporting at the AG's discretion. Covered entities must declare their intent to use an alternative pathway to the Attorney General and will be deemed in compliance until they revoke intent or the AG revokes the rule. No direct compliance obligation arises from this section beyond the declaration requirement.

Section 99

Effective date

This Act takes effect January 1, 2027.

Sets the Act's effective date as January 1, 2027. No compliance obligations arise from this section.

Safety Harmful content prevention · self-harm escalation

3 items

S-03.1

S-01.1

S-03.3

Large frontier developers must not use or deploy a frontier model if doing so would pose unreasonable catastrophic risk.

Deceptive Conduct AI-generated likeness · consent requirements

1 item

CP-01

Governance Risk management · accountability programs

9 items

G-01.1

G-02.1

G-02.3

G-01.3

G-03.3

G-03.1

G-03.2

G-01.5

Regulatory Reporting · disclosure · audit

4 items

R-01.1

Frontier developers must report any critical safety incident pertaining to one of their frontier models to the Attorney General within 15 days after discovering the incident.

R-01.1

Large chatbot providers must report any child safety incident pertaining to one of their covered chatbots to the Attorney General within 15 days after discovering the incident.

R-02.1

Large frontier developers must transmit to the Attorney General a summary of any assessment of catastrophic risk resulting from internal use of their frontier models at least every 3 months.

Passage Likelihood

Low

Status Introduced

Chamber No passage

Committee No action

Majority party Yes

Bipartisan No

Prior session None

Legislative History

2026-01-29 Filed with the Clerk by Rep. Daniel Didech

2026-02-04 Added Chief Co-Sponsor Rep. Kimberly Du Buclet

2026-02-06 First Reading

2026-02-06 Referred to Rules Committee

2026-02-11 Added Co-Sponsor Rep. Rita Mayfield

2026-02-19 Added Co-Sponsor Rep. Justin Cochran

2026-03-04 Assigned to Judiciary - Civil Committee

2026-03-27 Rule 19(a) / Re-referred to Rules Committee

2026-05-04 Removed Co-Sponsor Rep. Rita Mayfield

2026-05-04 Added Chief Co-Sponsor Rep. Rita Mayfield

2026-05-08 Added Co-Sponsor Rep. Mary Beth Canty

2026-05-08 Added Co-Sponsor Rep. Nabeela Syed

2026-05-08 Added Co-Sponsor Rep. Dave Vella

2026-05-08 Added Co-Sponsor Rep. Suzanne M. Ness

2026-05-08 Added Co-Sponsor Rep. Maura Hirschauer

2026-05-08 Added Co-Sponsor Rep. Margaret Croke

2026-05-08 Added Co-Sponsor Rep. Martha Deuter

2026-05-08 Added Co-Sponsor Rep. Margaret A. DeLaRosa

2026-05-08 Added Co-Sponsor Rep. Kam Buckner

2026-05-08 Added Co-Sponsor Rep. Katie Stuart

Sources

Full Text ↗

Entry Last Reviewed

2026-05-20

AI generated