
Virginia
Virginia matters as precedent. Its High-Risk AI Developer and Deployer Act, HB 2094, passed the legislature in 2025, but the governor vetoed it, citing burden on innovation. No broad AI law is in force, and the 2026 chatbot bills, including SB 796, were continued to 2027. A 2026 law directs the Joint Commission on Technology and Science to report by November 1, 2026 on a framework for independent organizations that would verify AI models against safety standards. On September 18, 2026 Governor Spanberger signed Executive Order 22, creating a rapid-response AI task force co-led by the chief transformation officer, the counsel to the governor, and the secretary of administration, and on September 22 wrote to congressional leaders asking for federal AI accountability guardrails built on federal-state collaboration.
Key points
- HB 2094 passed both chambers in 2025 and was vetoed in March 2025.
- The veto made Virginia the clearest example of executive resistance to state AI frameworks.
- The Virginia Consumer Data Protection Act's profiling provisions still reach AI systems. SB 796, a chatbot bill, passed the Senate in February 2026 and was continued to 2027 by a House committee on March 2.
- Executive Order 22, signed September 18, 2026, creates a rapid-response AI task force on workforce displacement, data privacy, and cybersecurity, co-led by the chief transformation officer, the counsel to the governor, and the secretary of administration, alongside data-center measures. A previous task force was created by executive order in 2024. On September 22 the governor wrote to the four congressional leaders asking for federal AI accountability guardrails built on federal-state collaboration.
- Chapters 425 and 426 of the 2026 Acts of Assembly direct the Joint Commission on Technology and Science to study a framework for independent verification organizations that would assess whether AI models and applications meet standards for preventing personal injury and property damage, including a possible licensing scheme, and to report by November 1, 2026.
Laws and instruments
HB 2094: High-Risk AI Developer and Deployer Act
Comprehensive high-risk AI framework passed by the legislature and vetoed by the governor in 2025. Not law.
Timeline
- February 2025HB 2094 passes both chambers.
- March 2025Governor vetoes HB 2094.
- March 2, 2026A House committee continues the chatbot bill SB 796 to 2027.
- September 18, 2026Executive Order 22 creates an AI task force on workforce displacement, data privacy, and cybersecurity, with new data-center measures.
- September 22, 2026The governor writes to the Speaker and the Senate and House leaders asking for federal AI accountability guardrails built on federal-state collaboration.
- November 1, 2026Report due from the Joint Commission on Technology and Science on independent verification of AI models.
Who it applies to
No comprehensive AI duties. The VCDPA's automated-profiling opt-outs apply to AI systems handling Virginians' personal data.
Penalties
None AI-specific; VCDPA enforcement by the Attorney General.
Common questions
Does Virginia have a comprehensive AI law?
What are the penalties for AI violations in Virginia?
Who does AI regulation in Virginia apply to?
Artificial Intelligence Regulations, "AI Regulation in Virginia," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/virginia.html.
Entries state the position as of the review date and link to the primary text for verification.