Illinois High-Impact AI Governance Principles and Disclosure Act

Applies To

Overview

H 3529 is a pending bill introduced in the Illinois General Assembly that would create a standalone statutory framework governing the deployment of high-impact AI systems by private-sector entities operating in Illinois. The bill distinguishes high-impact AI from lower-risk applications and imposes a tiered set of obligations calibrated to the potential harm of the system's use. Core provisions include mandatory AI impact assessments, internal governance policies, and periodic disclosures directed at affected individuals and, in some cases, the public. Enforcement would rely on civil penalties administered through a designated state authority, with violation thresholds tied to the nature and scale of non-compliance. The bill was introduced in the 2025 legislative session and remains subject to committee review, amendment, and floor votes before any enactment. Enterprises operating AI systems that affect Illinois residents should monitor H 3529 alongside the separate SB 315 track, as both bills could impose concurrent obligations if enacted.

Key Requirements

• •Conduct and document impact assessments for any AI system classified as high-impact prior to deployment
• •Maintain written internal AI governance policies covering accountability, oversight, and risk mitigation procedures
• •Provide disclosures to individuals subject to consequential AI-driven decisions, identifying the AI's role in the outcome
• •Submit periodic business-facing reports to a designated state authority on high-impact AI deployments
• •Retain assessment and governance records for a defined period sufficient to support regulatory audit
• •Exposure to civil penalties for violations, with penalty amounts expected to scale by severity and organizational size

What Your Organization Must Do

• →Inventory all AI systems currently in use and assess which qualify as high-impact under the bill's anticipated classification criteria
• →Develop a template impact assessment process now so it can be activated quickly if the bill advances to enactment
• →Assign internal ownership for AI governance documentation to a specific compliance, legal, or risk function
• →Draft individual disclosure language for AI-assisted decisions in employment, credit, housing, and similar domains before the bill's effective date
• →Update procurement and vendor management frameworks to require impact assessment support and governance documentation from third-party AI vendors
• →Establish a legislative monitoring cadence to track H 3529 amendments, committee votes, and potential consolidation with SB 315

Playbook Guidance

Step-by-step implementation guidance for compliance teams.

Frequently Asked Questions

What types of AI systems would be classified as high-impact under Illinois H 3529?

The bill targets AI systems used in consequential decision-making contexts, specifically employment, credit, and housing. While the final classification criteria remain subject to amendment, organizations should treat any AI that materially affects individuals' access to opportunities or services as presumptively high-impact for planning purposes.

Does Illinois H 3529 apply to businesses headquartered outside Illinois that deploy AI affecting Illinois residents?

The bill's obligations attach to private-sector entities deploying high-impact AI systems in Illinois, which would capture out-of-state companies whose AI decisions affect Illinois residents. Compliance counsel should assess nexus broadly rather than relying solely on the organization's state of incorporation.

How does Illinois H 3529 interact with the separate Illinois SB 315 AI bill?

Both bills were introduced in the 2025 legislative session and could impose concurrent obligations if enacted independently. Organizations should monitor whether the two tracks are consolidated through amendment, since operating under dual compliance frameworks would increase documentation and reporting burdens significantly.

What civil penalty exposure does H 3529 create for non-compliant AI deployers?

The bill contemplates civil penalties administered through a designated state authority, with amounts expected to scale based on violation severity and organizational size. Final penalty thresholds have not been fixed, as the bill remains in committee review and is subject to further amendment.

What does H 3529 require companies to disclose to individuals affected by high-impact AI decisions?

The bill would require organizations to notify individuals subject to consequential AI-driven decisions, specifically identifying the AI system's role in producing the outcome. Compliance teams should begin drafting disclosure language now for employment, credit, and housing contexts to avoid delays if the bill advances quickly.

When do companies need to complete AI impact assessments under Illinois H 3529?

The bill requires impact assessments to be completed and documented before deploying any AI system classified as high-impact. Because the bill has no effective date yet, organizations should treat pre-deployment assessment as the operational baseline and build template processes now to support rapid activation upon enactment.