Artificial IntelligenceRegulations
United States

Virginia

Lapsed / failedApproach: The veto case study: comprehensive bill passed, then blocked

Virginia matters as precedent. Its High-Risk AI Developer and Deployer Act, HB 2094, passed the legislature in 2025, but the governor vetoed it, citing burden on innovation. No broad AI law is in force, and the 2026 chatbot bills, including SB 796, were continued to 2027. A 2026 law directs the Joint Commission on Technology and Science to report by November 1, 2026 on a framework for independent organizations that would verify AI models against safety standards. On September 18, 2026 Governor Spanberger signed Executive Order 22, creating a rapid-response AI task force co-led by the chief transformation officer, the counsel to the governor, and the secretary of administration, and on September 22 wrote to congressional leaders asking for federal AI accountability guardrails built on federal-state collaboration.

Key points

  • HB 2094 passed both chambers in 2025 and was vetoed in March 2025.
  • The veto made Virginia the clearest example of executive resistance to state AI frameworks.
  • The Virginia Consumer Data Protection Act's profiling provisions still reach AI systems. SB 796, a chatbot bill, passed the Senate in February 2026 and was continued to 2027 by a House committee on March 2.
  • Executive Order 22, signed September 18, 2026, creates a rapid-response AI task force on workforce displacement, data privacy, and cybersecurity, co-led by the chief transformation officer, the counsel to the governor, and the secretary of administration, alongside data-center measures. A previous task force was created by executive order in 2024. On September 22 the governor wrote to the four congressional leaders asking for federal AI accountability guardrails built on federal-state collaboration.
  • Chapters 425 and 426 of the 2026 Acts of Assembly direct the Joint Commission on Technology and Science to study a framework for independent verification organizations that would assess whether AI models and applications meet standards for preventing personal injury and property damage, including a possible licensing scheme, and to report by November 1, 2026.

Laws and instruments

HB 2094: High-Risk AI Developer and Deployer Act

Virginia HB 2094 (2025)
Lapsed / failed

Comprehensive high-risk AI framework passed by the legislature and vetoed by the governor in 2025. Not law.

Effective: Vetoed 2025

Timeline

  • February 2025
    HB 2094 passes both chambers.
  • March 2025
    Governor vetoes HB 2094.
  • March 2, 2026
    A House committee continues the chatbot bill SB 796 to 2027.
  • September 18, 2026
    Executive Order 22 creates an AI task force on workforce displacement, data privacy, and cybersecurity, with new data-center measures.
  • September 22, 2026
    The governor writes to the Speaker and the Senate and House leaders asking for federal AI accountability guardrails built on federal-state collaboration.
  • November 1, 2026
    Report due from the Joint Commission on Technology and Science on independent verification of AI models.

Who it applies to

No comprehensive AI duties. The VCDPA's automated-profiling opt-outs apply to AI systems handling Virginians' personal data.

Penalties

None AI-specific; VCDPA enforcement by the Attorney General.

Common questions

Does Virginia have a comprehensive AI law?
No. Virginia matters as precedent. Its High-Risk AI Developer and Deployer Act, HB 2094, passed the legislature in 2025, but the governor vetoed it, citing burden on innovation. No broad AI law is in force, and the 2026 chatbot bills, including SB 796, were continued to 2027. A 2026 law directs the Joint Commission on Technology and Science to report by November 1, 2026 on a framework for independent organizations that would verify AI models against safety standards. On September 18, 2026 Governor Spanberger signed Executive Order 22, creating a rapid-response AI task force co-led by the chief transformation officer, the counsel to the governor, and the secretary of administration, and on September 22 wrote to congressional leaders asking for federal AI accountability guardrails built on federal-state collaboration.
What are the penalties for AI violations in Virginia?
None AI-specific; VCDPA enforcement by the Attorney General.
Who does AI regulation in Virginia apply to?
No comprehensive AI duties. The VCDPA's automated-profiling opt-outs apply to AI systems handling Virginians' personal data.
Cite this page

Artificial Intelligence Regulations, "AI Regulation in Virginia," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/virginia.html.

Entries state the position as of the review date and link to the primary text for verification.