Illinois AI Cabinet Executive Order

Overview

Executive Order 2026-07 — Executive Order to Create Illinois Artificial Intelligence Cabinet was issued by Governor JB Pritzker on September 22, 2026. It establishes the Illinois Artificial Intelligence Cabinet to provide expert analysis and assess AI risks affecting Illinois residents and the critical infrastructure on which they rely. The Governor invokes executive authority under Article V, Section 11 of the Illinois Constitution. The order took effect immediately upon filing with the Secretary of State on September 22, 2026.

The instrument is an executive order establishing governmental responsibilities, not legislation enacted by the General Assembly or a comprehensive private-sector AI regulatory code. Responsible AI development is framed around safety, accountability, oversight, and continuing human control. The recitals identify potentially catastrophic risks and concerns involving privacy, children, algorithmic bias, healthcare judgment, environmental impacts, energy consumption, and electoral influence. The operative response is an expert advisory and policy-development body. The order does not prohibit AI development, create a licensing system, or establish generally applicable technical standards. The Cabinet must sunset no later than December 31, 2027; its recommendations and feasibility assessments are not already enacted obligations for companies or residents.

Definitions and Scope

The order abbreviates Artificial Intelligence as AI and the Illinois Artificial Intelligence Cabinet as the AI Cabinet. It does not provide a technical or legal definition of artificial intelligence, identify covered model architectures, or set thresholds based on computational resources, capability, deployment scale, or company size. Its institutional remit is expressed through the risks members must assess rather than a classification of regulated systems. AI companies and AI data centers appear in the policy rationale and evaluation assignments but are not defined for a private-sector compliance regime.

AI incidents and AI threats are central working concepts without defined severity, causation requirements, or reporting thresholds. Public assets include public buildings, water systems, education systems, and information storage; these examples are not exhaustive. Critical infrastructure is not defined sector by sector. Safety, accountability, transparency, ethical use, and risk management describe advisory subjects and possible safeguards, not measurable compliance criteria. These contextual meanings must be distinguished from formal statutory definitions. The reference to critical safety incidents and a 72-hour reporting requirement concerns separate legislation discussed in the recitals, not a reporting obligation created by the Cabinet provisions.

Governance and Institutional Framework

The Cabinet combines academic and expert partners with senior state-government leaders. Expert partners advise on safety impacts, data privacy, cybersecurity and critical infrastructure, ethical use of AI technology, legal frameworks, and standards for security and governance. The Governor must appoint members within thirty days after the effective date, following input from state agencies. No total membership, individual appointees, fixed number of academic seats, or representation from particular universities or companies is specified. Members serve at the Governor's pleasure, without fixed individual terms or an independent appointment and removal process.

The seven expressly included governmental participants are senior leaders from the Illinois Department of Innovation and Technology; Illinois Emergency Management Agency–Office of Homeland Security; Illinois Department of Financial and Professional Regulation; Illinois Commerce Commission; Illinois State Police; Illinois Department of Public Health; and Illinois Environmental Protection Agency. The Governor must designate a chair from the membership and may designate a co-chair. Members are volunteers serving without compensation. The Illinois Department of Innovation and Technology, or DoIT, provides administrative support. The Cabinet may consult outside experts and other agency personnel as needed. The order specifies no voting rules, quorum, standing committees, meeting frequency, or separate enforcement office.

Core Duties and Policy Evaluations

The Cabinet must develop policies and procedures to prepare for and respond to AI incidents while preserving residents' safety, health, and economic security. It must develop protective policies and procedures for public assets, analyze emerging incidents, and share lessons to prevent and prepare for future threats to residents, organizations, and infrastructure. Recommendations to state agencies and governmental bodies in Illinois must address AI risk-management practices using the most recent available information. These duties establish a broad public-protection mandate rather than a focus limited to one industry or deployment type.

Four specific possibilities require feasibility evaluation: conditioning data-center tax incentives, permits, or operational approvals on safety, accountability, and transparency standards; addressing the energy burden AI data centers place on Illinois's grid and ratepayers; incorporating AI safety and accountability requirements into state procurement and contracting; and assessing whether existing legal remedies adequately hold AI companies accountable for harm. These assignments do not immediately change incentives, permits, utility charges, procurement clauses, or liability rules. The recitals' concerns about privacy, children, bias, healthcare, the environment, and political influence explain the policy rationale but do not independently create privacy rights, healthcare restrictions, environmental limits, or election-finance controls.

Implementation Framework

Implementation begins with establishment of the Cabinet upon effective filing, followed by gubernatorial appointments within thirty days after state-agency input. Leadership designation and DoIT administrative support provide the organizational foundation. Members must bring cross-sector expertise to recommendations and assess the feasibility, timeframe, and potential challenges of each recommended policy measure. Practical implementation analysis is therefore mandatory: advice must consider whether a proposal can be carried out, the time required, and likely obstacles, rather than identifying desirable safety outcomes alone.

The order prescribes no particular risk-assessment methodology, implementation-plan deadline, stated budget appropriation, or mandatory publication of a final report. It does not require another agency to adopt every recommendation. Cabinet policy-development and advisory functions remain distinct from subsequent binding rules, procurement changes, legislation, or administrative decisions. Outside consultation is permitted as needed, but no compulsory public consultation process is established. Contracts, agreements, and collective bargaining agreements are expressly protected against a construction of the order that would contravene them. These safeguards constrain interpretation of implementation and do not themselves amend those agreements.

Monitoring and Evaluation

The Cabinet must analyze emerging AI incidents, share lessons learned, and recommend risk-management practices using the most recent information available. These duties support continuing learning, allowing new incidents to inform protective procedures and later governmental advice. The order does not establish a public incident-reporting portal, compel companies to submit incident data to the Cabinet, grant investigatory subpoena authority, or prescribe a data-collection system. Its analytical role is not a market-surveillance authority or a new mandatory reporting destination for businesses.

Evaluation also applies to each recommended policy measure's feasibility, implementation timeframe, and potential challenges, as well as the four specified subjects involving data centers, energy, procurement, and legal remedies. These are qualitative criteria: no numerical performance indicators, recurring reporting intervals, independent review requirements, or publication deadlines are established. Quarterly progress reports and a final report before sunset are not required. Consultation can support analysis, but its mechanics remain unspecified. The sunset date limits institutional duration rather than prescribing an evaluation, renewal, or reporting procedure.

Penalties, Liability, and Legal Safeguards

The order creates no civil fines, criminal offenses, administrative sanctions, or private right of action for AI-related harm. It does not authorize the Cabinet to award compensation, adjudicate complaints, suspend permits, or enforce company safety standards. Members instead assess whether existing legal remedies sufficiently hold AI companies accountable for harm caused by AI. This evaluates the existing legal position and potential policy needs without amending liability standards. Examining conditions for data-center incentives or approvals likewise does not create penalties or make existing approvals contingent on unspecified Cabinet standards.

No dedicated appeal mechanism is established because the Cabinet has no licensing or adjudication process. A severability clause preserves other provisions and applications when a court of competent jurisdiction invalidates a provision or application, insofar as they can operate without the invalid part. The order must not be construed to contravene contracts, agreements, or collective bargaining agreements. These provisions govern interpretation and continuing effect; they do not grant immunity from other laws or establish substantive defenses to AI-related claims. Other liability rules and remedies must be assessed under their governing instruments.

Relationship to Other Instruments

The recitals identify the AI Safety Measures Act as legislation passed by the Illinois General Assembly and signed by the Governor. They describe it as requiring AI companies to develop risk-mitigation frameworks, undergo annual independent third-party audits, report critical safety incidents within 72 hours, and publicly explain system risks and mitigation measures. These obligations belong to the separate legislation described in the recitals, not the operative Cabinet provisions. The order does not identify the Act's bill number, public-act number, statutory citations, covered-company criteria, detailed exceptions, enforcement provisions, or effective dates.

The order expressly supersedes contrary provisions of prior executive orders without identifying particular predecessors or repealing statutes. Supersession is limited to conflicting provisions, not a blanket replacement of earlier AI-related executive action, and operates alongside the protection for contracts and agreements. Procurement and legal-remedies assignments may produce recommendations affecting other instruments, but no identified procurement rule or liability statute is amended. Establishing an advisory body does not automatically create binding technical standards. Any subsequent measure must be assessed under its own authority, text, adoption process, and commencement provisions. The Illinois General Assembly record for EO2607 is an official legislative record for the executive order.

National and Federal Alignment

The recitals characterize AI as a cross-border issue whose risks extend beyond one state or country. They call for immediate and forceful federal action while explaining that Illinois should not remain inactive while awaiting it. The Cabinet is a state-level institutional response to risks considered to require broader governmental action. Its operative remit remains centered on Illinois residents, public assets, organizations, infrastructure, agencies, and governmental bodies. No federal-state coordinating committee, federal agency liaison, or submission of recommendations to Congress or a federal department is required.

No federal AI statute, presidential order, or federal technical framework is incorporated by reference into the operative provisions. The order contains no express federal-preemption analysis or equivalence with federal compliance obligations. Security and governance standards are areas of expert advice, not adoption of an identified national standard. Alignment is therefore a matter of policy purpose: federal action is favored while Illinois develops preparedness and risk-management advice. Compliance with a federal instrument is not declared sufficient for future Illinois measures. Specific compatibility or conflicts require examination of the relevant federal laws and subsequent Illinois action.

Implementation Timeline

Governmental Responsibilities and Compliance Checklist

Sources and References