From the Local Government edition of October 16, 2026
Will County, Illinois board unanimously adopts a 12-page employee AI policy requiring FedRAMP tools, human final decisions and public-data-only use for now
Will County, Illinois · County governance and staff AI use · Will County, Illinois, United States
- Publisher
- Farmers Weekly Review
- Original publication
- October 16, 2026
- Source retrieved
- 2026-10-17
- Event date
- 2026-10-15
What happened
The Will County Board approved a 12-page AI policy on Oct 15 unanimously and without discussion after about six months of bipartisan committee work drawing on NACo and United Counties Council of Illinois material. Humans make all final decisions on AI-produced work. The policy covers all county offices including elected officials; collective bargaining agreements supersede conflicting terms and future CBAs are to mirror the policy. All AI tools must be FedRAMP certified; HIPAA, CJIS, IRS and Juvenile Court Act data rules apply; inputs and outputs may be subject to FOIA or discovery and users should not turn off history. AI may not make final hiring or administrative decisions, analyze biometric identifiers, or draft minutes from closed sessions. The article quotes the policy stating no AI tool currently meets county standards for anything besides public data. Violations can lead to termination.
Why it matters
A large Illinois county has set a hard procurement gate (FedRAMP) and a de facto public-data-only boundary before any sensitive-data AI deployment, which shapes what vendors and use cases are viable at county scale in the near term.
Evidence and measured results
Farmers Weekly Review article (Oct 16) opened in full via curl HTML save; it quotes the policy text at length and interviews committee chair Mica Freeman. The policy PDF itself and board minutes were not opened.
Limitations and uncertainty
Secondary report of policy text; the 12-page policy was not independently opened; no inventory of current tools or approved products was reported; passage without debate means limited public record of trade-offs.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-10-16; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- County wants lawful staff AI use but has no tool approved for non-public data.
- Stakeholders
- County board IT committee chair
- Information Communications Technology Department
- Circuit Court Clerk
- Elected officeholders
- Union representatives
- Discovery questions
- Which workloads are blocked by the public-data-only limit?
- Which FedRAMP tools are already licensed?
- How will CBA language be aligned?
- Who signs off a sensitive-data tool?
- Value hypothesis
- Qualifying one FedRAMP tool for a defined sensitive-data use could unlock value; no measured benefits reported.
- Potential engagement
- Tool-qualification assessment against FedRAMP, CJIS and HIPAA with a recommended approved-tool list.
- Unsupported claims
- Guaranteed savings
- That any current tool meets county standards for sensitive data
- That unanimous passage means implementation is funded
Pre-sales engineering
Role takeaway
- Fit
- Counties requiring FedRAMP-authorized AI with retained history for records requests.
- Architecture and integration
- Government cloud tenant, history retention and export for FOIA/discovery, data-class gating of prompts.
- Prerequisites
- Data classification map
- Inventory of AI tools in use
- FedRAMP authorization evidence per tool
- Constraints
- Public data only until a tool qualifies
- No closed-session inputs
- No biometric analysis
- CJIS/HIPAA/IRS rules
- Security
- Ban on personal-device workarounds and history disabling; sensitive data excluded pending qualification.
- Proof of value
- Show enforced data-class blocking
- Demonstrate retained prompt/output export
- Map one tool to FedRAMP and CJIS evidence
Delivery
Role takeaway
- Work
- Collect signed acknowledgments, align CBAs, publish approved tools and run annual review.
- Dependencies
- ICT Department
- County board IT committee
- Labor relations
- Elected offices
- Ownership
- Information Communications Technology Department with the Capital Improvements and IT Committee.
- Skills and adoption
- Employees must sign and follow the policy; training content was not described.
- Governance checkpoints
- Approved-tool list published
- CBA alignment at renewal
- Annual committee review
- Acceptance criteria
- Proposed: signatures from all covered staff within 90 days
- Proposed: every tool in use mapped to FedRAMP status
- Proposed: documented process to approve a sensitive-data tool
- Risks
- Shadow AI on personal devices
- CBA conflicts
- Policy stalls with no qualifying tool
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
FedRAMP-only tooling and retained chat history push toward enterprise government tenants with logging; sensitive workloads (CJIS, HIPAA) need separate assurance before any AI use.
Governance
Who approves, reviews and stays accountable for outcomes?
Bipartisan committee ownership with annual review by the Capital Improvements and IT Committee; elected offices are covered, and labor agreements take precedence where they conflict.
Security and privacy
What data, permissions and controls need testing?
Explicit bans on entering closed-session material, biometric analysis and using personal devices to bypass controls; FOIA/discovery exposure of prompts and outputs is stated.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
CBA-supremacy clause and a requirement for employees to sign the policy make labor relations and training central to rollout.
Procurement
What should contracts, pricing and exit terms secure?
FedRAMP certification is a mandatory gate for every AI tool; the circuit clerk confirmed an existing program complies.
Operating model
Which teams own the service once it runs?
Permitted uses are low-risk (analysis without PII, non-sensitive visualizations); final administrative and hiring decisions stay with humans.
Publication history
- 2026-10-16Local Government · Issue 416 resources
Stable resource ID: will-county-il-ai-policy-fedramp-public-data-only-20261016