Insights · AI Law · AIGP-Certified Counsel
Illinois AI Law in 2026: What Every Business Needs to Know
By Adam Lysinski, Esq. · AIGP (IAPP) · Updated June 2026
If your business in Illinois uses artificial intelligence — to screen job applicants, generate marketing, analyze customers, or power a product feature — 2026 is the year the law caught up. Three developments matter most: new rules on AI in employment, new protection for a person's digital likeness, and the continuing reach of Illinois's biometric privacy law. Here is what each means, in plain English.
1. AI in employment — Illinois HB 3773
Effective January 1, 2026, Illinois amended the Illinois Human Rights Act through HB 3773 to address artificial intelligence in employment decisions. In broad terms, the amendment treats the discriminatory use of AI — in hiring, promotion, discipline, discharge, and similar decisions — as a civil-rights violation, and it addresses notifying employees and applicants when AI is used in those decisions.
If you use resume-screening software, automated video-interview scoring, productivity-monitoring AI, or any algorithmic tool that influences employment decisions, this applies to you — even if a third-party vendor built the tool. The practical questions to answer now: what AI touches your employment decisions? Does it produce disparate outcomes? Are you disclosing its use? Can your vendor support compliance? Getting these wrong converts an HR tool into civil-rights exposure.
2. Your face and voice — digital replica rights (HB 4875)
Generative AI has made it trivial to clone a voice or a face. Illinois HB 4875 responds by strengthening individuals' rights against the unauthorized creation and commercial use of a realistic digital replica. For businesses, this reshapes any contract or campaign involving a person's likeness: advertising with synthetic spokespeople, AI-generated voiceovers, training data built from real people, and entertainment or creator deals. For individuals — performers, creators, public figures — it is a tool to control how their likeness is used in the AI era. If your work touches a real person's voice or image, your agreements should now address digital replicas explicitly.
3. Biometrics and AI — BIPA's long reach
Illinois's Biometric Information Privacy Act (BIPA) remains one of the strictest biometric-privacy laws in the country, and AI keeps expanding its relevance. Facial recognition, voiceprints, and other biometric identifiers — built into security systems, time-and-attendance tools, and customer-analytics AI — can trigger BIPA's notice, written-consent, and retention requirements, with statutory damages on a per-violation basis. The exposure is real and the litigation is active. Before deploying or buying any AI that touches biometric data, confirm BIPA compliance first, not after.
4. The contract layer — AI vendor agreements
Most businesses adopt AI by signing a vendor's standard terms — which are written to protect the vendor. A sound AI vendor contract should address: whether your data trains the vendor's models; ownership of inputs and outputs; bias-testing and human-oversight duties; indemnification for IP infringement and AI-caused harm; compliance with the employment-AI rules, BIPA, and privacy law; security and breach terms; and a clear allocation of liability when the AI is wrong. Standard SaaS templates rarely cover these. This is exactly the kind of gap a focused review closes before it becomes a liability.
5. The fix — an AI governance program, "human in the loop"
These rules are not reasons to avoid AI — they are reasons to govern it. A workable AI governance program inventories where AI is used, classifies each use by risk, sets disclosure and human-oversight requirements, vets vendors and contracts, and documents the decisions. Done once, correctly, it turns AI from a compliance liability into a defensible advantage. The guiding principle is simple: AI assists; a licensed human decides.
For the firm’s dedicated service pages on these laws, see HB 3773 (employment AI), HB 4875 (digital replicas), and BIPA compliance.
Frequently asked questions
Does Illinois have a law regulating AI in employment?
Yes. Illinois amended the Illinois Human Rights Act through HB 3773 to address AI in employment decisions, effective January 1, 2026. It treats discriminatory use of AI in hiring, promotion, discipline, and similar decisions as a civil-rights violation and addresses notice to employees about AI used in those decisions. Employers using AI or algorithmic HR tools should review their vendors, disclosures, and decision processes against the amended Act, and confirm current requirements with counsel.
What are digital replica rights under Illinois HB 4875?
HB 4875 addresses "digital replicas" — AI-generated recreations of a person's voice or likeness — strengthening rights against unauthorized creation or commercial use of a realistic digital replica. It affects advertising, media, entertainment, and any business using synthetic voices or AI spokespeople, as well as individuals seeking to control their own likeness. Contracts involving a person's voice, image, or performance should now address digital-replica rights explicitly.
How does BIPA apply to companies using AI?
Illinois's Biometric Information Privacy Act is among the strictest in the country and intersects directly with AI. Facial recognition, voiceprints, and other biometric identifiers — including AI features in security, time-and-attendance, and analytics products — can trigger BIPA's notice, consent, and retention requirements, with statutory damages per violation. Confirm BIPA compliance before deploying or buying AI that touches biometric data.
What should be in an AI vendor contract?
At minimum: what data the vendor may use and whether your data trains their models; ownership of inputs and outputs; bias-testing and human-oversight obligations; indemnification for IP infringement and AI-caused harm; compliance with employment-AI rules, BIPA, and privacy law; security and breach terms; audit and explainability rights; and a clear allocation of liability when the AI is wrong. Standard SaaS templates rarely cover these.
Why hire an AIGP-certified attorney for AI matters?
The AIGP credential from the IAPP certifies dedicated training in AI governance, risk, and compliance — a discipline most general practitioners have not studied. Adam Lysinski holds the AIGP credential and has completed AI programs at Stanford Law (CodeX), Harvard, Wharton, MIT, and Google. For Illinois businesses facing new employment-AI rules, digital-replica rights, BIPA exposure, and AI vendor contracts, that focused expertise means current analysis and a governance program built correctly the first time — on a "human in the loop" philosophy: AI assists, a licensed attorney decides.
Talk to AIGP-certified counsel
AI governance, done right the first time. For Illinois employment-AI rules, digital-replica rights, BIPA exposure, or an AI vendor contract review, speak with an AIGP-certified attorney.