Virginia · AI compliance plan
What Virginia’s AI laws require of you.
Virginia has 24 enacted AI laws in our records. We have mapped 5 of them duty by duty: 16 duties in all, each with who it falls on, when it starts and the section of law it comes from.
The plan at a glance
Pro turns this plan into a spreadsheet for audit files and a calendar of every start date. The plan on this page stays open to everyone.
Already in effect 11 duties
These duties are in force today.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| July 1, 2019 | Virginia unlawful dissemination of created or altered nude images (HB 2678, 2019)Also enacted as SB1736 | Person | Do not maliciously disseminate or sell a nude or sexual image of another person, including one created or altered from their likeness, to coerce, harass or intimidate.Applies when: The person knows or has reason to know they are not licensed or authorized to disseminate or sell the image. | Ongoing | Va. Code § 18.2-386.2(A) |
| July 1, 2020 | Virginia personal delivery device (delivery robot) rules (SB 758, 2020) | Personal delivery device operator | Maintain general liability insurance of at least $100,000 for damages from the combined operations of devices under your control.Applies when: The operator operates personal delivery devices in Virginia. | Ongoing | Va. Code § 46.2-908.1:1(E) |
| July 1, 2020 | Virginia personal delivery device (delivery robot) rules (SB 758, 2020) | Personal delivery device operator | Ensure each device has a unique identifying device number and a clearly visible means of identifying the operator.Applies when: A personal delivery device is operated in Virginia (the text places this rule on the device). | Ongoing | Va. Code § 46.2-908.1:1(B) |
| July 1, 2020 | Virginia personal delivery device (delivery robot) rules (SB 758, 2020) | Personal delivery device operator | Ensure devices do not block public rights-of-way, obey traffic and pedestrian signals and signs, go no faster than 10 mph on sidewalks and crosswalks, and brake to a controlled stop.Applies when: A personal delivery device is operated in Virginia (the text places these rules on the device). | Ongoing | Va. Code § 46.2-908.1:1(B) |
| July 1, 2020 | Virginia personal delivery device (delivery robot) rules (SB 758, 2020) | Personal delivery device operator | Use roadways only where no sidewalk or crosswalk is available, only on the side of roads posted 25 mph or less, without unreasonably interfering with traffic.Applies when: A device travels on a roadway instead of a sidewalk or crosswalk. | Ongoing | Va. Code § 46.2-908.1:1(A) |
| July 1, 2020 | Virginia personal delivery device (delivery robot) rules (SB 758, 2020) | Personal delivery device operator | Equip devices used between sunset and sunrise with an approved white front headlight visible 500 feet and an approved red rear reflector visible 600 feet.Applies when: A device is in use between sunset and sunrise. | Ongoing | Va. Code § 46.2-1015(A) |
| November 11, 2021 | Virginia patient access to intelligent personal assistants law (HB 2154, 2021) | Nursing facility | Establish and implement policies to ensure permissible access to and use of an intelligent personal assistant that a patient provides, while protecting health information under HIPAA.Applies when: A patient receiving inpatient services provides their own intelligent personal assistant. | Ongoing | 12VAC5-371-140(G); Code of Virginia 32.1-127(B)(29) |
| July 1, 2024 | Virginia child pornography definition reaching depictions of minors who need not exist (SB 731, 2024) | Person | Do not produce or make, or attempt or prepare to produce or make, child pornography, including obscene depictions of minors who need not actually exist, such as computer-generated images.Applies when: Any production on or after the law took effect. | Ongoing | Va. Code § 18.2-374.1(A), (B)(2) |
| July 1, 2024 | Virginia child pornography definition reaching depictions of minors who need not exist (SB 731, 2024) | Person | Do not knowingly take part in filming, photographing or otherwise producing child pornography by any means.Applies when: Any participation in production on or after the law took effect. | Ongoing | Va. Code § 18.2-374.1(B)(3) |
| July 1, 2024 | Virginia child pornography definition reaching depictions of minors who need not exist (SB 731, 2024) | Person | Do not knowingly finance, or attempt or prepare to finance, child pornography.Applies when: Any financing on or after the law took effect. | Ongoing | Va. Code § 18.2-374.1(B)(4) |
| July 1, 2024 | Virginia child pornography definition reaching depictions of minors who need not exist (SB 731, 2024) | Person | Do not accost, entice or solicit a person under 18 with intent to induce or force them to perform in or be a subject of child pornography.Applies when: Any solicitation of a minor. | Ongoing | Va. Code § 18.2-374.1(B)(1) |
Triggered by an event 5 duties
These apply when something happens, such as a request, an incident or a decision about a person. Each row says what triggers it.
| Starts | Law | Who | What it requires | How often | Source |
|---|---|---|---|---|---|
| When triggered | Virginia patient access to intelligent personal assistants law (HB 2154, 2021) | Hospital | Establish and implement policies to ensure permissible access to and use of a patient-provided intelligent personal assistant during inpatient services, protecting health information under HIPAA.Applies when: As required by the Board's licensure regulations, which the statute says shall include this requirement. The hospital regulation was not opened. | Ongoing | Code of Virginia 32.1-127(B)(29) |
| When triggered | Virginia personal delivery device (delivery robot) rules (SB 758, 2020) | Personal delivery device operator | Comply with the federal Hazardous Materials Transportation Act and its regulations when a device carries hazardous materials, including ammunition.Applies when: A device transports hazardous materials. | Each time it happens | Va. Code § 46.2-908.1:1(C) |
| When triggered | Virginia public adjuster advertising: digital avatar disclosure (HB 437, 2026) | Public adjuster | Disclose in the advertisement if a computer-generated digital avatar is used.Applies when: A written or electronic advertisement for public adjusting services. The sentence sits in the subsection on unlicensed spokespersons; whether it reaches advertisements without a spokesperson is not clear. | Each time it happens | Va. Code § 38.2-1845.23(D) |
| When triggered | Virginia public adjuster advertising: digital avatar disclosure (HB 437, 2026) | Public adjuster | Disclose that an unlicensed spokesperson is a paid or unpaid spokesperson, is not licensed, and is endorsing the services of a public adjuster.Applies when: An unlicensed spokesperson is used in a written or electronic advertisement. | Each time it happens | Va. Code § 38.2-1845.23(D) |
| When triggered | Virginia public adjuster advertising: digital avatar disclosure (HB 437, 2026) | Licensed public adjuster named in the advertisement | Personally review the advertisement and make sure it complies with the section and is fair, accurate and not untruthful, deceptive or misleading.Applies when: The adjuster's name and license number appear in an advertisement. | Each time it happens | Va. Code § 38.2-1845.23(E) |
Law by law
Who each law covers, who enforces it, the penalties, whether people can sue and what the text leaves open. Open a law to see it; every line cites its section.
Virginia child pornography definition reaching depictions of minors who need not exist (SB 731, 2024)
4 duties · checked November 15, 2026
SB 731 (2024 Session); amends Va. Code § 18.2-374.1 (codified history ends 2024, c. 262). Official text · Full law page
Who it covers
- Person. Any person who solicits a minor for, produces, takes part in producing, or finances child pornography, including obscene depictions of minors who need not actually exist. Va. Code § 18.2-374.1(A), (B)
Enforcement
- Enforcer: Criminal prosecution (the section does not name the prosecutor). A web search on November 15, 2026 found no lawsuit challenging this section and no court order blocking it; court dockets were not searched.
- Penalty: 5 to 30 years in prison; 5-year mandatory minimum if the offender is at least 7 years older; 15 to 40 years (15-year minimum) for a repeat such offense, a violation where the subject is under 15. Va. Code § 18.2-374.1(C)(1)
- Penalty: 1 to 20 years in prison; 3 to 30 years (3-year minimum) if the offender is at least 7 years older; 10 to 30 years (10-year minimum) for a repeat such offense, a violation where the subject is at least 15 and under 18. Va. Code § 18.2-374.1(C)(2)
- Can people sue? The law does not say Va. Code § 18.2-374.1 (no civil remedy in the section)
- Time to fix before enforcement: The law does not say
What the text leaves open
- Possession, distribution and sale offenses in § 18.2-374.1:1 were read but not covered: that page refers to § 18.2-374.1 without stating the definition, and its Class 6, 5 and 4 felony penalties need § 18.2-10, which was not opened.
- Whether the obscenity-based clause for non-existent minors will be limited by courts on First Amendment grounds is untested; no Virginia ruling was found.
Virginia patient access to intelligent personal assistants law (HB 2154, 2021)
2 duties · checked November 14, 2026
HB 2154, Acts of Assembly 2021, Special Session I, ch. 219; Code of Virginia 32.1-127(B)(29); carried out for nursing facilities by 12VAC5-371-10 and 12VAC5-371-140(G). Official text · Full law page
Who it covers
- Hospital, nursing home and certified nursing facility. Each hospital, nursing home and certified nursing facility licensed under the article. The statute tells the Board to require these policies through its licensure regulations. Code of Virginia 32.1-127(B)(29)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Code of Virginia 32.1-127(B)(29)
- Time to fix before enforcement: The law does not say
What the text leaves open
- The statute is a direction to the Board's regulations rather than a direct command to facilities; the hospital licensure regulation (12VAC5-410) that should carry it was not opened.
- The act's approval and effective dates were not confirmed from an official page in this run.
- Licensure sanctions for breaking Board regulations are in other sections of Title 32.1, which were not opened.
- Section 32.1-127 as read refers to the Board without defining it; the Regulatory Town Hall page identifies the State Board of Health.
Virginia personal delivery device (delivery robot) rules (SB 758, 2020)
6 duties · checked November 15, 2026
SB 758 (2020 Session), 2020 Acts of Assembly, c. 1269; Va. Code §§ 46.2-100, 46.2-908.1:1 and 46.2-1015 (also amended §§ 46.2-904, 46.2-908.1 and 46.2-2101). Official text · Full law page
Who it covers
- Personal delivery device operator. An entity, or its agent aged 16 or older, that exercises direct physical control or monitoring over a personal delivery device's navigation system and operation. Va. Code § 46.2-100
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Va. Code § 46.2-908.1:1 (no civil action stated)
- Time to fix before enforcement: The law does not say
Exemptions
- A person or entity that only requests delivery-device services, or only arranges for and dispatches them, is not an operator. Va. Code § 46.2-100
What the text leaves open
- Which penalty applies to breaking the device, insurance or lighting rules is not stated in the sections read; Title 46.2's general penalty provisions were not opened.
- Subsection B is written as rules for the device, not the operator; this file assigns them to the operator because the operator controls the device, which the text does not say directly.
- The section gives a device on a sidewalk or crosswalk the rights and responsibilities of a pedestrian (§ 46.2-908.1:1(D)); pedestrian duties were not read.
- Any local ordinances or Commonwealth Transportation Board rules adding safety requirements were not looked for.
Virginia public adjuster advertising: digital avatar disclosure (HB 437, 2026)
3 duties · checked November 14, 2026
2026 Acts of Assembly, chapter 142 (HB 437); Code of Virginia § 38.2-1845.23 (false information and advertising generally), among other public adjuster sections. Official text · Full law page
Who it covers
- Public adjuster. A public adjuster, or public adjusting firm, that advertises public adjusting services. Public adjusters are licensed by the Commission. Va. Code § 38.2-1845.23(B)-(E); § 38.2-1845.24(A)
Enforcement
- Enforcer: The law does not name one
- Penalty: the law does not set an amount.
- Can people sue? The law does not say Va. Code § 38.2-1845.23 (silent)
- Time to fix before enforcement: The law does not say
Exemptions
- Not an advertisement: internal firm communications that are not promotional aids and are not given to the public. Va. Code § 38.2-1845.23(F)(1)
- Not an advertisement: communications with policyholders, other than materials urging them to enter, renew, extend or reinstate a public adjusting contract. Va. Code § 38.2-1845.23(F)(2)
- Not an advertisement: material used only to recruit, train and educate staff, if not also used to induce the public to contract for services. Va. Code § 38.2-1845.23(F)(3)
What the text leaves open
- The chapter 142 text and the Governor's approval date could not be read on the Legislative Information System. The July 1, 2026 date rests on the general rule in § 1-214, not on the chapter's own wording.
- Whether the digital avatar sentence was added in 2026 or reworded from earlier text was not confirmed, because the chapter's marked-up text was not read.
- The avatar disclosure sits in the subsection on unlicensed spokespersons. Whether it applies to every advertisement that uses a digital avatar is unclear.
- Penalties and license discipline for public adjusters elsewhere in Title 38.2 were not opened, so no amount is given.
- The section does not define computer-generated digital avatar or say how the disclosure must be worded or displayed.
Virginia unlawful dissemination of created or altered nude images (HB 2678, 2019)
1 duty · checked November 14, 2026
HB 2678 (2019 Session); amends Va. Code § 18.2-386.2 (codified history: 2014, c. 399; 2019, cc. 490, 515; 2024, c. 697). Official text · Full law page
Who it covers
- Person. Any person who disseminates or sells a covered image of another person. Va. Code § 18.2-386.2(A)
Enforcement
- Enforcer: Criminal prosecution (the section does not name the prosecutor), plus civil suits by injured persons under § 8.01-40.4. A web search on November 14, 2026 found no report of a court order blocking this section; court dockets were not searched.
- Penalty: Class 1 misdemeanor: up to 12 months in jail and a fine of up to $2,500, either or both, unlawful dissemination or sale of images of another. Va. Code § 18.2-386.2(A); § 18.2-11(a)
- Penalty: Compensatory and punitive damages, plus reasonable attorney fees and costs, civil action by a person injured by conduct prohibited under § 18.2-386.2. Va. Code § 8.01-40.4(A)
- Can people sue? Yes Va. Code § 8.01-40.4 (any injured person, with or without a criminal charge or conviction; two years from the latest of the last act, the plaintiff turning 18, or discovery)
- Time to fix before enforcement: The law does not say
Exemptions
- Internet service providers, email providers and other information service or access providers are not responsible for content provided by another person. Va. Code § 18.2-386.2(B)
- The civil action does not impose liability on an interactive computer service for content provided by another person. Va. Code § 8.01-40.4(C)
What the text leaves open
- The 2019 chaptered text of HB 2678 was not opened; which of 2019 chapters 490 and 515 is HB 2678 was not confirmed from official text.
- The July 1, 2019 effective date comes from the site's verified records and a tracker; it was not confirmed from official text in this run.
- 2024 chapter 697 also amended § 18.2-386.2; that bill was not identified or read. The duty above reflects the codified section as it reads today.
Other enacted laws to check
These 18 enacted AI laws are in the states you chose, but they are not yet mapped duty by duty, so they are not in the plan above. Each page has a summary and the official source.
- Virginia HB1124: Autonomous vehicles; work group to conduct an assessment of workforce impacts, etc. (effective July 1, 2026)
- Virginia HB1186: Artificial intelligence; use of systems for student instruction. (effective July 1, 2026)
- Virginia HB1496: Law-enforcement agencies; surveillance technology reporting. (effective July 1, 2024)
- Virginia HB1642: Artificial intelligence-based tool; definition, use of tool. (effective July 1, 2025)
- Virginia HB171: Internet safety; instruction to include key modern digital safety topics. (effective July 1, 2026)
- Virginia HB2031: Facial recognition technology; local law-enforcement agencies, etc., authorization of use. (effective July 1, 2021)
- Virginia HB2124: Synthetic digital content; definition, penalty, report, effective clause.
- Virginia HB2627: Autonomous driving systems; Secretary of Transportation to convene work group to study. (effective July 1, 2025)
- Virginia HB2692: Custodial interrogations; false statements to a child prohibited, inauthentic replica documents. (effective July 1, 2025)
- Virginia HB553: Department of Corrections; language access and translation services for inmates. (effective July 1, 2026)
- Virginia HB582: Autonomous truck-mounted attenuators; pilot program authorized. (effective July 1, 2026)
- Virginia HB797: Artificial intelligence; framework for person/entity acting as an independent verification org. (effective July 1, 2026)
- Virginia SB1053: Synthetic digital content; definition, penalty, report, effective clause.
- Virginia SB320: Autonomous truck-mounted attenuators; pilot program authorized. (effective July 1, 2026)
- Virginia SB384: Artificial intelligence; framework for person/entity acting as an independent verification org. (effective July 1, 2026)
- Virginia SB394: Artificial intelligence; use of systems for student instruction. (effective July 1, 2026)
- Virginia SB487: Artificial intelligence by public bodies; Joint Commission on Technology and Science to analyze use. (effective July 1, 2024)
- Virginia SB741: Facial recognition technology; authorized uses. (effective July 1, 2022)
How the plan is built
Each law in the plan was read from its official text, on the legislature’s or state’s own website. 265 of the 326 have also been read a second time to confirm every date, threshold, penalty and enforcer; the rest have had one full read, and each shows the date it was last checked. Each duty is written in plain English in 30 words or fewer and carries the section it comes from, with a link.
Where a law is silent, the plan says so. It does not borrow a penalty from another statute or guess at a deadline. A law that is repealed or replaced on a known date shows that end date, and its duties leave the plan once the date passes. The date each law was last checked appears with it.
The plan is built fresh from these records every time the page loads, so it changes as soon as a law is added or re-checked. To report an error, use the corrections page. For how we find laws and decide what counts as an AI law, see our methodology. If you are not sure which laws touch your business at all, start with Am I Affected?
Common questions
What does an AI compliance plan cover?
Each duty an enacted state AI law places on a business or other regulated party: who it applies to, what it requires, when it starts, how often it recurs, who enforces it, the penalties and whether people can sue. The builder covers 1,235 duties in 326 enacted laws across 50 states, and every duty links to the section of law it comes from.
Where does the information come from?
From the official text of each law: the enrolled bill, session law or codified statute, opened on the legislature's or state's own website. 265 of the 326 laws have also been read a second time to confirm every date, threshold, penalty and enforcer, and the date each law was last checked is shown with it. Where a law is silent on a point, such as a penalty amount, the plan says the law does not say rather than filling the gap. Law firm summaries and news reports are never used as sources.
Does the plan include every AI law in a state?
Not yet. It includes the enacted laws we have mapped duty by duty. When you choose a state, its other enacted AI laws are listed separately with links, so nothing is left out of view. New laws are added as they are read. When a law is repealed or replaced on a set date, its duties show that end date and leave the plan once it passes.
How do I know which duties apply to my company?
Start with the 'who it covers' entry for each law: many apply only above a size or revenue threshold, only to developers or only to deployers, or only in one industry. The plan quotes those conditions from the text. Whether your company meets them depends on facts only you and your counsel know.
Is this legal advice?
No. It is information drawn from official legal texts, organized so you can see what each law requires. Use it to brief your team and your lawyers, not in place of them.
What does Pro add?
The same plan as a CSV file for spreadsheets and audit files, and as a calendar file (.ics) with every dated duty as an event that links back to the law. Both are built from the states and uses you pick. The plan on this page, and printing it, are open to everyone.