{"resourceId":"will-county-il-ai-policy-fedramp-public-data-only-20261016","versions":[{"version":"external-18a9e435ab5fb5ceeedd41172b7273da874544c3b02263cf805fb67179919250","resource":{"id":"will-county-il-ai-policy-fedramp-public-data-only-20261016","title":"Will County, Illinois board unanimously adopts a 12-page employee AI policy requiring FedRAMP tools, human final decisions and public-data-only use for now","organization":"Will County, Illinois","sector":"County governance and staff AI use","geography":"Will County, Illinois, United States","publishedAt":"October 16, 2026","publicationDate":"2026-10-16","eventDate":"2026-10-15","sourceName":"Farmers Weekly Review","sourceLabel":"Independent local news report","sourceUrl":"https://fwrnews.com/2026/10/16/no-fooling-county-board-passes-ai-policy-unanimously-with-no-discussion/","evidenceClass":"independent-reporting","outcomeClass":"emerging","topics":["governance-procurement","data-security","accessibility-workforce"],"finding":"The Will County Board approved a 12-page AI policy on Oct 15 unanimously and without discussion after about six months of bipartisan committee work drawing on NACo and United Counties Council of Illinois material. Humans make all final decisions on AI-produced work. The policy covers all county offices including elected officials; collective bargaining agreements supersede conflicting terms and future CBAs are to mirror the policy. All AI tools must be FedRAMP certified; HIPAA, CJIS, IRS and Juvenile Court Act data rules apply; inputs and outputs may be subject to FOIA or discovery and users should not turn off history. AI may not make final hiring or administrative decisions, analyze biometric identifiers, or draft minutes from closed sessions. The article quotes the policy stating no AI tool currently meets county standards for anything besides public data. Violations can lead to termination.","sledRelevance":"A large Illinois county has set a hard procurement gate (FedRAMP) and a de facto public-data-only boundary before any sensitive-data AI deployment, which shapes what vendors and use cases are viable at county scale in the near term.","evidence":"Farmers Weekly Review article (Oct 16) opened in full via curl HTML save; it quotes the policy text at length and interviews committee chair Mica Freeman. The policy PDF itself and board minutes were not opened.","architectureImplications":"FedRAMP-only tooling and retained chat history push toward enterprise government tenants with logging; sensitive workloads (CJIS, HIPAA) need separate assurance before any AI use.","governanceImplications":"Bipartisan committee ownership with annual review by the Capital Improvements and IT Committee; elected offices are covered, and labor agreements take precedence where they conflict.","securityPrivacyImplications":"Explicit bans on entering closed-session material, biometric analysis and using personal devices to bypass controls; FOIA/discovery exposure of prompts and outputs is stated.","caveats":"Secondary report of policy text; the 12-page policy was not independently opened; no inventory of current tools or approved products was reported; passage without debate means limited public record of trade-offs.","streamIds":["local-government"],"roles":{"sales":"Sales framing: Will County shows counties can adopt sweeping AI rules while concluding no tool yet qualifies for non-public data. Lead discovery on which workloads are blocked by that gap and which FedRAMP products are already in use. A bounded engagement is a tool-qualification review mapping candidate tools to FedRAMP, CJIS and HIPAA obligations. The evidence cannot support claims of productivity gains or that any product is pre-approved. Interpretation: the near-term opening is assurance work, not broad copilot sales.","engineering":"Engineering framing: Fit depends on FedRAMP-authorized services with history retention and records export for FOIA and discovery. Integration needs data classification so only public data reaches generative tools until a sensitive-data tier is approved. Prerequisites are a tool inventory and data-class map; constraints include CJIS, HIPAA, IRS and juvenile data rules and a ban on closed-session inputs. Proof of value should show retained logs and enforced data boundaries. Interpretation: classification controls matter more than model choice here.","delivery":"Delivery framing: Roll out signed acknowledgments across all offices, reconcile the policy with each collective bargaining agreement, and stand up the annual review in the IT committee. Ownership sits with the Information Communications Technology Department under committee oversight. Acceptance criteria should cover signature completion, an approved-tool list and a documented path for qualifying a sensitive-data tool. Risks include shadow use on personal devices and uneven adoption across elected offices. Interpretation: plan for a staged tool-qualification process."},"roleDetails":{"sales":{"customerProblem":"County wants lawful staff AI use but has no tool approved for non-public data.","stakeholders":["County board IT committee chair","Information Communications Technology Department","Circuit Court Clerk","Elected officeholders","Union representatives"],"discoveryQuestions":["Which workloads are blocked by the public-data-only limit?","Which FedRAMP tools are already licensed?","How will CBA language be aligned?","Who signs off a sensitive-data tool?"],"valueHypothesis":"Qualifying one FedRAMP tool for a defined sensitive-data use could unlock value; no measured benefits reported.","potentialEngagement":"Tool-qualification assessment against FedRAMP, CJIS and HIPAA with a recommended approved-tool list.","unsupportedClaims":["Guaranteed savings","That any current tool meets county standards for sensitive data","That unanimous passage means implementation is funded"]},"engineering":{"fit":"Counties requiring FedRAMP-authorized AI with retained history for records requests.","architectureIntegration":"Government cloud tenant, history retention and export for FOIA/discovery, data-class gating of prompts.","prerequisites":["Data classification map","Inventory of AI tools in use","FedRAMP authorization evidence per tool"],"constraints":["Public data only until a tool qualifies","No closed-session inputs","No biometric analysis","CJIS/HIPAA/IRS rules"],"security":"Ban on personal-device workarounds and history disabling; sensitive data excluded pending qualification.","proofOfValue":["Show enforced data-class blocking","Demonstrate retained prompt/output export","Map one tool to FedRAMP and CJIS evidence"]},"delivery":{"work":"Collect signed acknowledgments, align CBAs, publish approved tools and run annual review.","dependencies":["ICT Department","County board IT committee","Labor relations","Elected offices"],"ownership":"Information Communications Technology Department with the Capital Improvements and IT Committee.","skillsAdoption":"Employees must sign and follow the policy; training content was not described.","governanceCheckpoints":["Approved-tool list published","CBA alignment at renewal","Annual committee review"],"acceptanceCriteria":["Proposed: signatures from all covered staff within 90 days","Proposed: every tool in use mapped to FedRAMP status","Proposed: documented process to approve a sensitive-data tool"],"risks":["Shadow AI on personal devices","CBA conflicts","Policy stalls with no qualifying tool"]}},"retrievedAt":"2026-10-16T22:24:40-05:00","enrichedAt":"2026-10-16T22:40:00-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"CBA-supremacy clause and a requirement for employees to sign the policy make labor relations and training central to rollout.","procurementImplications":"FedRAMP certification is a mandatory gate for every AI tool; the circuit clerk confirmed an existing program complies.","operatingModelImplications":"Permitted uses are low-risk (analysis without PII, non-sensitive visualizations); final administrative and hiring decisions stay with humans.","sourceVerification":{"openedUrl":"https://fwrnews.com/2026/10/16/no-fooling-county-board-passes-ai-policy-unanimously-with-no-discussion/","referenceExcerpt":"No AI tool currently meets the County’s security, privacy, and compliance standards for handling anything besides public data.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}