The Illinois Home of Representatives handed a invoice on Wednesday requiring frontier AI labs like OpenAI, Anthropic, and Google DeepMind to have their security practices audited by a 3rd occasion. If signed into regulation, AI security consultants inform WIRED, it might be the nation’s main verify on the facility of main AI corporations.
The invoice, SB 315, now heads to governor JB Pritzker’s desk. In a put up on social media on Wednesday, Pritzker stated he plans to signal the invoice, citing a necessity to carry Large Tech accountable.
Since Congress has but to move any significant AI security laws, state lawmakers have fortunately stepped up in recent times to advertise payments that present their constituents they’re maintaining Silicon Valley in verify. As AI instruments change into more and more well-liked, and the corporations behind them race towards large IPOs, polls present that American voters are on the lookout for extra AI regulation.
In consequence, security advocates and tech corporations have zeroed in on state legislatures as the first battleground to hash out how these legal guidelines ought to look. OpenAI’s chief of world affairs, Chris Lehane, advised WIRED final week that the corporate’s AI coverage is now oriented round passing a sequence of comparable state legal guidelines.
California and New York have the strongest AI security legal guidelines, requiring tech corporations to supply details about mannequin guardrails and to publish studies on security incidents as they happen. Illinois’ invoice goes a step additional, requiring impartial auditors to confirm that an AI lab is adhering to its personal security requirements. Beforehand, no impartial physique was required to maintain an AI lab accountable to its personal security claims.
“We’re in a state of affairs the place the AI corporations grade their very own homework,” says Scott Wisor, coverage director at Safe AI Venture, a nonprofit that helps SB 315. “Ought to SB 315 change into regulation, Illinois would require an impartial auditor to verify whether or not the AI labs actually adhere to their security commitments.”
Wisor says it’s broadly anticipated that, beneath SB 315, AI labs may use the Large 4 accounting and auditing companies—Deloitte, EY, KPMG, and PwC—to audit their security practices. He additionally says it’s attainable that AI labs may faucet members of the AI Evaluator Discussion board—a coalition of smaller analysis organizations together with METR, Transluce, and Averi—to evaluate adherence to security requirements.
Illinois state consultant Daniel Didech, a sponsor of SB 315, tells WIRED that state legislatures are enjoying an necessary function by shaping America’s AI coverage and appearing as a testing floor for any federal legal guidelines that may come sooner or later. “Legal guidelines like this create a world the place it’s extra seemingly for the federal authorities to move one thing,” Didech says.
Company Pursuits
Illinois has emerged as a significant enviornment within the ongoing struggle over state AI legal guidelines. OpenAI beforehand supported a invoice in Illinois that may let AI labs dodge legal responsibility if their fashions brought on catastrophic hurt. Nevertheless, Lehane has since stated the corporate’s blanket assist for the invoice was an oversight, and it by no means supported the legal responsibility defend within the invoice. Extra lately, OpenAI endorsed SB 315.
“The Illinois Basic Meeting has proven actual bipartisan management in advancing SB 315 and creating a considerate framework for frontier AI security. As AI techniques change into extra succesful, clear expectations round security, transparency, incident reporting, and accountability matter,” Lehane stated in a press release to WIRED.
