Guide

Illinois AI Laws: Complete Guide for Businesses

A complete guide to the AI laws Illinois businesses must follow, including the Human Rights Act AI amendment (HB 3773), the AI Video Interview Act, and the Biometric Information Privacy Act. Covers who is covered, notice and consent rules, deadlines, and how to prepare.

Last updated June 20, 2026 · Ask a question about this topic →

Why Illinois Businesses Need to Pay Attention Now

Illinois has moved faster than most states on artificial intelligence in the workplace. Two AI-specific laws are already on the books, a third long-standing privacy law reaches a lot of AI use, and the newest amendment took effect at the start of 2026. Any company that hires, screens, or manages workers in Illinois is in scope.

The state's approach is employment-first. Rather than one sweeping statute that covers every industry, Illinois has layered targeted rules: one on AI in video interviews, one on AI that affects employment decisions, and a biometric privacy law that predates the current AI wave but applies squarely to face and voice analysis.

This guide breaks down each law in plain terms: who it covers, what it requires, when it takes effect, and the practical steps a business should take now. It is written for Illinois employers and the companies that serve them, not for lawyers.

Key Takeaway

Illinois is the second state, after Colorado, to pass a broad law on AI in employment decisions. If your business uses AI to hire, screen, promote, or manage people in Illinois, you already have legal obligations, and a bigger one took effect January 1, 2026.

The Illinois Human Rights Act AI Amendment (HB 3773)

House Bill 3773 amended the Illinois Human Rights Act and took effect January 1, 2026. It was signed by Governor Pritzker in August 2024. It is the centerpiece of Illinois AI employment law and applies to any employer with one or more employees in Illinois for 20 or more calendar weeks in a year.

The amendment does three core things. First, it bars employers from using AI that has a discriminatory effect on the basis of a protected class in employment decisions, including recruitment, hiring, promotion, renewal of employment, selection for training, discharge, discipline, tenure, and the terms or conditions of employment. Second, it bars using ZIP code as a proxy for a protected class. Third, it requires employers to notify employees and applicants when AI is used in those decisions.

A key point on scope: HB 3773 is an employment law, not a broad multi-industry AI statute. It does not impose Colorado-style high-risk-AI impact assessments across housing, lending, and healthcare. The two are often confused. In Illinois, the employment relationship is the trigger.

The Illinois Department of Human Rights was directed to issue rules on the form and timing of the required notice. Employers should track the final notice rules and build the disclosure into their hiring and HR workflows.

Key Takeaway

Effective January 1, 2026: Illinois employers may not use AI that produces a discriminatory effect on protected classes in employment decisions, may not use ZIP code as a stand-in for a protected class, and must notify workers when AI is used in those decisions.

Related Bills

FederalIn Committee
Low Risk

S 5307

Senator Chris Coons (D-DE) introduced this bill requiring the federal government to develop a strategy for aligning immigration policy with America's goal of leading in AI. It focuses on attracting and retaining top AI talent, scientists, and entrepreneurs from abroad while addressing national security concerns. No direct rules on companies, just a mandate for the executive branch to produce a plan.

AI Research and DevelopmentHigher Education and ResearchVenture-Backed Startups

Last action: Aug 6, 2026

FederalIn Committee
Medium Risk

S 3097

Senator Bill Cassidy (R-LA) introduced this bill to update federal health information privacy rules, likely expanding protections beyond what HIPAA currently covers. It has cleared committee and sits on the Senate Legislative Calendar, meaning it could get a floor vote. Specific AI provisions are not detailed in the current summary, but any health data reform will affect how AI tools handle patient information.

Healthcare ProvidersHealth InsuranceDigital Health and Telemedicine

Last action: Aug 4, 2026

FederalIn Committee
Low Risk

S 5050

Senator Lisa Blunt Rochester (D-DE) introduced the Expanding AI Voices Act to broaden participation in AI research and workforce development, likely through grants and outreach to underrepresented groups and minority-serving institutions. The bill is in early committee review and focuses on expanding the AI talent pipeline rather than regulating AI products or uses.

Higher EducationAI Research and DevelopmentHR Tech

Last action: Jul 21, 2026

FederalIn Committee
Medium Risk

HR 8183

Rep. Burgess Owens (R-UT) introduced the MATCH Act, which passed committee unanimously (33-0) and focuses on labor and employment matters. Based on available details, the bill appears aimed at improving job matching and workforce development, though specific AI regulation provisions are not fully detailed in the current summary. Business leaders should monitor as it moves toward a floor vote.

HR TechStaffing and RecruitingWorkforce Development

Last action: Jul 21, 2026

FederalIn Committee
Medium Risk

HR 9715

Rep. David Schweikert (R-AZ) introduced this bill to explicitly allow the use of artificial intelligence in arbitration proceedings. It would greenlight AI tools acting as arbitrators or assisting in dispute resolution, a practice currently in legal gray area under federal arbitration law.

Legal ServicesLegal TechFinancial Services

Last action: Jul 15, 2026

FederalIn Committee
Medium Risk

HR 9477

Rep. Nathaniel Moran (R-TX) introduced this bill to create a federal system for reporting serious AI incidents, meaning cases where AI systems cause harm, malfunction, or produce dangerous outputs. It would require AI developers and deployers to notify the government when their systems cause specified harms, similar to how airlines report safety incidents.

Healthcare AIFinancial ServicesHR Tech

Last action: Jun 25, 2026

The AI Video Interview Act (820 ILCS 42)

The Illinois Artificial Intelligence Video Interview Act has been law since January 1, 2020, and it was one of the first AI hiring laws in the country. It applies to employers that ask applicants to record video interviews and then use AI to analyze them.

Before the interview, the employer must do three things: tell the applicant that AI may be used to analyze the video and assess fitness for the role, explain in plain terms how the AI works and the general types of characteristics it evaluates, and obtain the applicant's consent to be evaluated by the AI. An employer may not use AI to evaluate an applicant who has not consented.

Two further duties apply: the employer must limit sharing of the video to people whose expertise is needed to evaluate the applicant, and must delete the video, and instruct anyone who received it to delete it, within 30 days of an applicant's request.

Key Takeaway

In effect since January 2020: if you use AI to analyze video interviews, you must tell applicants, explain how the AI works, get their consent, limit who sees the video, and delete it within 30 days on request.

Related Bills

FederalIn Committee
Low Risk

S 5307

Senator Chris Coons (D-DE) introduced this bill requiring the federal government to develop a strategy for aligning immigration policy with America's goal of leading in AI. It focuses on attracting and retaining top AI talent, scientists, and entrepreneurs from abroad while addressing national security concerns. No direct rules on companies, just a mandate for the executive branch to produce a plan.

AI Research and DevelopmentHigher Education and ResearchVenture-Backed Startups

Last action: Aug 6, 2026

FederalIn Committee
High Risk

S 4199

Senator Markey (D-MA) introduced a bill that would ban companies from using AI to collect or process personal data from anyone under 17 without explicit consent. The Youth AI Privacy Act specifically targets AI systems that analyze biometric data, predict behavior, or make automated decisions about minors, requiring companies to delete collected data and conduct regular impact assessments.

Social Media PlatformsEdTechGaming and Entertainment

Last action: Aug 5, 2026

FederalIn Committee
High Risk

S 4407

Senator Ted Cruz (R-TX) introduced a bill requiring AI chatbot companies to create special family accounts for children under 13 and get verifiable parental consent for teens 13-17. Companies like ChatGPT, Claude, and Gemini would need to build parental control systems and age verification processes, similar to what social media platforms currently do under COPPA.

Consumer AI ServicesEdTechGaming & Entertainment

Last action: Aug 5, 2026

FederalIn Committee
Medium Risk

S 5171

Senator Tammy Duckworth (D-IL) introduced this bill to regulate AI-powered toys and products marketed to children under 13. It would create federal safety standards covering data collection, content generation, and mental health impacts of AI toys, with FTC enforcement authority.

Toy ManufacturingConsumer ElectronicsEdTech

Last action: Aug 5, 2026

FederalIn Committee
Medium Risk

S 3097

Senator Bill Cassidy (R-LA) introduced this bill to update federal health information privacy rules, likely expanding protections beyond what HIPAA currently covers. It has cleared committee and sits on the Senate Legislative Calendar, meaning it could get a floor vote. Specific AI provisions are not detailed in the current summary, but any health data reform will affect how AI tools handle patient information.

Healthcare ProvidersHealth InsuranceDigital Health and Telemedicine

Last action: Aug 4, 2026

FederalIn Committee
High Risk

S 5154

Senator Jon Husted (R-OH) introduced this bill to protect minors from harms linked to AI companion chatbots (think Character.AI or Replika-style products). It would require age verification, safety guardrails, and disclosures for chatbot platforms that kids can access, and it would create liability for companies whose bots engage minors in sexual, self-harm, or other harmful conversations.

Consumer AI / Chatbot PlatformsSocial MediaEdTech

Last action: Jul 28, 2026

The Biometric Information Privacy Act (BIPA)

The Biometric Information Privacy Act (740 ILCS 14) has been law since 2008. It governs how private entities collect, store, and use biometric identifiers such as fingerprints, faceprints, and voiceprints. AI tools that analyze faces in video, recognize voices, or scan other biometric traits fall within its reach.

BIPA requires a written policy with a retention and destruction schedule, written notice of what is collected and why, and the individual's written consent before collection. It also restricts selling or sharing biometric data.

What makes BIPA stand out is enforcement. It gives individuals a private right of action and sets statutory damages per violation, which has produced large class-action settlements. Any Illinois business deploying biometric or face- and voice-analysis AI should treat BIPA compliance as a priority, not an afterthought.

Key Takeaway

BIPA predates the AI wave but reaches a lot of AI: any system that uses faceprints, voiceprints, or other biometric identifiers needs written notice and consent. BIPA carries a private right of action and statutory damages, which makes it one of the most litigated privacy laws in the country.

Related Bills

FederalIn Committee
Medium Risk

S 5358

Senator Mark Warner (D-VA) wants the Financial Stability Oversight Council (FSOC), the federal body that watches for systemic risks in finance, to formally monitor how AI is being used across banks, insurers, and investment firms. The bill would add AI oversight to FSOC's existing duties, meaning regulators would track things like AI-driven trading, credit decisions, and fraud detection for risks that could destabilize markets.

BankingInsuranceAsset Management

Last action: Aug 6, 2026

FederalIn Committee
High Risk

S 1748

Senator Marsha Blackburn (R-TN) reintroduced the Kids Online Safety Act (KOSA), which forces social media platforms and online services to actively prevent harm to minors from features like algorithmic recommendations, addictive design, and content promoting suicide, eating disorders, or substance abuse. Platforms would owe minors a legal 'duty of care' and must give kids and parents tools to disable addictive features and limit data collection. It sits in the Senate Commerce Committee after passing the Senate 91-3 in the previous Congress.

Social MediaOnline GamingEdTech

Last action: Aug 5, 2026

FederalIn Committee
High Risk

S 4199

Senator Markey (D-MA) introduced a bill that would ban companies from using AI to collect or process personal data from anyone under 17 without explicit consent. The Youth AI Privacy Act specifically targets AI systems that analyze biometric data, predict behavior, or make automated decisions about minors, requiring companies to delete collected data and conduct regular impact assessments.

Social Media PlatformsEdTechGaming and Entertainment

Last action: Aug 5, 2026

FederalIn Committee
High Risk

S 4407

Senator Ted Cruz (R-TX) introduced a bill requiring AI chatbot companies to create special family accounts for children under 13 and get verifiable parental consent for teens 13-17. Companies like ChatGPT, Claude, and Gemini would need to build parental control systems and age verification processes, similar to what social media platforms currently do under COPPA.

Consumer AI ServicesEdTechGaming & Entertainment

Last action: Aug 5, 2026

FederalIn Committee
Medium Risk

S 5171

Senator Tammy Duckworth (D-IL) introduced this bill to regulate AI-powered toys and products marketed to children under 13. It would create federal safety standards covering data collection, content generation, and mental health impacts of AI toys, with FTC enforcement authority.

Toy ManufacturingConsumer ElectronicsEdTech

Last action: Aug 5, 2026

FederalIn Committee
Medium Risk

S 3097

Senator Bill Cassidy (R-LA) introduced this bill to update federal health information privacy rules, likely expanding protections beyond what HIPAA currently covers. It has cleared committee and sits on the Senate Legislative Calendar, meaning it could get a floor vote. Specific AI provisions are not detailed in the current summary, but any health data reform will affect how AI tools handle patient information.

Healthcare ProvidersHealth InsuranceDigital Health and Telemedicine

Last action: Aug 4, 2026

Who Must Comply

The Human Rights Act AI amendment applies to employers with one or more employees in Illinois during 20 or more calendar weeks of the year. The trigger is having Illinois workers, not where the company is headquartered.

The AI Video Interview Act applies to any employer that uses AI to analyze video interviews for positions based in Illinois or for Illinois applicants, including remote roles. Again, the location of the position or the applicant controls, not the employer's home state.

BIPA applies to private entities that collect biometric data from Illinois residents. A company does not need an Illinois office to be covered; serving or employing Illinois residents is enough.

The practical read for most businesses: if you hire, screen, or manage anyone in Illinois, or if your tools process biometric data from Illinois residents, assume all three laws are in play.

How to Prepare: Practical Steps for Illinois Businesses

Step 1: Inventory your AI. List every tool that touches a hiring or employment decision, including resume screeners, AI video interview platforms, predictive scoring, scheduling tools, and performance analytics. You cannot comply with rules you have not mapped.

Step 2: Add the required notice. Build a clear disclosure into your application and HR process that tells applicants and employees when AI is used in a decision about them. Generic language buried in a privacy policy is not enough.

Step 3: Fix consent for video interviews. If you use AI to analyze video interviews, confirm you are getting specific, informed consent before the interview, separate from general interview consent, and that you have a 30-day deletion process.

Step 4: Run a discriminatory-effect review. Ask your vendors whether their tools have been tested for disparate outcomes across protected classes, and document what you find. Remove ZIP code and close proxies from any model that influences employment decisions.

Step 5: Check biometric tools against BIPA. Any face or voice analysis needs a written policy, a retention and destruction schedule, written notice, and written consent.

Step 6: Update vendor contracts. Require your AI vendors to document how their systems work, support your notice and consent obligations, and stand behind bias testing.

Key Takeaway

Start with an inventory of every AI tool that touches a hiring or employment decision, then add notice, consent, and a bias review on top of it.

Federal Context

Illinois rules sit on top of a shifting federal picture. Congress has introduced AI bills that would create nationwide disclosure and accountability requirements, and federal agencies are updating existing rules to cover AI in hiring and lending.

Compliance with Illinois law does not guarantee compliance with federal requirements, and the reverse is also true. The safest approach is to meet the most stringent rule that applies to a given activity, which for Illinois employment decisions currently means the Illinois standard.

Related Bills

FederalIn Committee
Medium Risk

HR 10044

Rep. Greg Casar (D-TX) introduced a bill that would tax companies for every AI token they use (think: every word processed by ChatGPT-style tools) and create a new Work Protection Administration inside the Department of Labor. The revenue would fund programs protecting workers displaced by AI automation.

Enterprise SaaSAI/ML PlatformsCustomer Service Tech

Last action: Aug 6, 2026

FederalIn Committee
Low Risk

S 5307

Senator Chris Coons (D-DE) introduced this bill requiring the federal government to develop a strategy for aligning immigration policy with America's goal of leading in AI. It focuses on attracting and retaining top AI talent, scientists, and entrepreneurs from abroad while addressing national security concerns. No direct rules on companies, just a mandate for the executive branch to produce a plan.

AI Research and DevelopmentHigher Education and ResearchVenture-Backed Startups

Last action: Aug 6, 2026

FederalIn Committee
Medium Risk

S 5358

Senator Mark Warner (D-VA) wants the Financial Stability Oversight Council (FSOC), the federal body that watches for systemic risks in finance, to formally monitor how AI is being used across banks, insurers, and investment firms. The bill would add AI oversight to FSOC's existing duties, meaning regulators would track things like AI-driven trading, credit decisions, and fraud detection for risks that could destabilize markets.

BankingInsuranceAsset Management

Last action: Aug 6, 2026

FederalIn Committee
Medium Risk

S 5252

Senator Bill Hagerty (R-TN) introduced this bill to block foreign adversaries (think China, Russia, Iran, North Korea) from extracting the underlying technical features of proprietary, closed-source AI models built by US companies. It targets model theft techniques like model distillation and would give the federal government new export-control-style powers over how US AI firms protect their models.

Foundation Model DevelopersCloud ComputingEnterprise SaaS

Last action: Aug 5, 2026

FederalIn Committee
High Risk

S 1748

Senator Marsha Blackburn (R-TN) reintroduced the Kids Online Safety Act (KOSA), which forces social media platforms and online services to actively prevent harm to minors from features like algorithmic recommendations, addictive design, and content promoting suicide, eating disorders, or substance abuse. Platforms would owe minors a legal 'duty of care' and must give kids and parents tools to disable addictive features and limit data collection. It sits in the Senate Commerce Committee after passing the Senate 91-3 in the previous Congress.

Social MediaOnline GamingEdTech

Last action: Aug 5, 2026

FederalIn Committee
High Risk

S 4199

Senator Markey (D-MA) introduced a bill that would ban companies from using AI to collect or process personal data from anyone under 17 without explicit consent. The Youth AI Privacy Act specifically targets AI systems that analyze biometric data, predict behavior, or make automated decisions about minors, requiring companies to delete collected data and conduct regular impact assessments.

Social Media PlatformsEdTechGaming and Entertainment

Last action: Aug 5, 2026

Keep reading

Related Guides

Common questions

Frequently Asked Questions

What is Illinois HB 3773?

HB 3773 is an amendment to the Illinois Human Rights Act, signed in August 2024 and effective January 1, 2026. It prohibits employers from using AI that produces a discriminatory effect on protected classes in employment decisions, prohibits using ZIP code as a proxy for a protected class, and requires employers to notify workers and applicants when AI is used in those decisions. It is an employment law and applies to employers with one or more employees in Illinois for 20 or more weeks in a year.

Does the Illinois Human Rights Act AI amendment cover housing, lending, or healthcare?

No. HB 3773 is focused on employment decisions. It does not impose the broad, multi-industry high-risk-AI obligations found in the Colorado AI Act. The two laws are often confused. In Illinois, the employment relationship is the trigger for the AI amendment.

Do I need consent to use AI in video interviews in Illinois?

Yes. Under the AI Video Interview Act, in effect since 2020, an employer that uses AI to analyze a video interview must tell the applicant beforehand, explain how the AI works and what it evaluates, and obtain the applicant's specific consent. An employer may not use AI to evaluate an applicant who has not consented, and must delete the video within 30 days of a request.

How does BIPA apply to AI?

Illinois's Biometric Information Privacy Act (BIPA) governs faceprints, voiceprints, and other biometric identifiers. AI tools that analyze faces in video, recognize voices, or scan biometric traits fall within it. BIPA requires written notice, written consent, and a retention and destruction schedule, and it carries a private right of action with statutory damages, which has produced large settlements.

Does a business need an Illinois office to be covered?

No. These laws follow the worker, the applicant, or the resident, not the company's headquarters. If you employ or screen people in Illinois, or process biometric data from Illinois residents, you can be covered even if your business is based in another state.

Need help preparing for AI compliance?

Our team helps Indiana organizations build AI governance frameworks tailored to their industry and risk profile.

Talk to Our Team

Get the Weekly AI Law Roundup

Plain-English summaries of the AI laws that matter for your business. Every Monday. Free.

No spam. Unsubscribe anytime.