Get emailed when this bill changes status, is amended, or advances.
Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
HB2250 mandates AI developers disclose training data and allows consumer opt-outs, with specific consent rules for adolescents. AI-related provisions effective July 1, 2026.
Virginia's HB2250 requires AI developers to disclose training data details on their websites. It empowers consumers to opt out of data processing, with specific consent rules for adolescents. The Attorney General has discretion over enforcement, with AI-related provisions effective July 1, 2026.
Key Provisions
Developers must disclose training data information on their websites.
Consumers can authorize third parties to opt out of personal data processing.
No processing of adolescent data without consent from the adolescent.
Confidentiality agreements cannot conceal noncompliance with the bill.
The Attorney General can offer opportunities to cure violations starting January 1, 2026.
Delayed effective date for AI-related provisions is July 1, 2026.
Revised definitions of 'sale of personal data,' 'sensitive data,' and 'biometric data.'
Latest Legislative Action
Left in Communications, Technology and Innovation
Bill Sponsors
Name
Role
District
Irene ShinD
Sponsor
HD-086
Jackie GlassD
Sponsor
HD-089
Michelle MaldonadoD
Sponsor
HD-050
Roll Call Votes
H ·
Subcommittee recommends laying on the table (9-Y 1-N) ·
Jan 27, 2025
9 Yea 1 Nay 1 OtherPassed ✓
Compliance Checklist
Disclose training data details on your website Who: Developers of generative AI systems Deadline: By July 1, 2026 Penalty: Legal action for non-compliance
Implement mechanisms for consumers to opt out of data processing Who: Data controllers and processors Deadline: By July 1, 2026 Penalty: Potential legal action for violations
Full Legal Analysis
HB2250, introduced in Virginia, focuses on transparency in AI training data and consumer data protection. It requires developers of generative AI systems to disclose information about the datasets used for training on their websites. Developers must maintain detailed records and provide mechanisms for Training Data Verification and Deletion Requests. Consumers can authorize third parties to opt out of personal data processing, using various technological means. For adolescents aged 13 to 15, controllers must obtain consent before processing personal data or collecting precise geolocation data. The Attorney General has discretion to offer opportunities to cure violations starting January 1, 2026. Confidentiality agreements cannot conceal noncompliance, ensuring transparency. The provisions related to AI developers take effect on July 1, 2026. The bill also revises definitions of 'sale of personal data,' 'sensitive data,' and 'biometric data.'
We use cookies for analytics to understand how visitors use this site. We also use essential cookies for site functionality.
See our Privacy Policy for details.