Regulon — VA-HB-747 · VA HB 747 (High-Risk AI Developer Act)

WHAT THIS BILL REGULATES · 5 REQUIREMENT TYPES

How Is This Bill Enforced

Enforcement Authority

Attorney General has exclusive enforcement authority. May issue civil investigative demands and bring actions in circuit court for injunctive relief and civil penalties. No private right of action.

Private Right of Action

No private right of action. Enforcement is exclusive to the designated authority.

Penalties

Civil penalty not to exceed $1,000 per violation plus reasonable attorney fees, expenses, and court costs. Willful violations carry a minimum of $1,000 and maximum of $10,000 per violation plus attorney fees, expenses, and court costs. Each violation constitutes a separate violation. Injunctive relief available without proof of damages. Civil penalties paid into the Literary Fund.

Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.

Statutory Text

Analysis & Obligations

Va. Code § 59.1-603

Definitions

As used in this chapter, unless the context requires a different meaning: "Algorithmic discrimination" means any discrimination that is (i) prohibited under state or federal law and (ii) a reasonably foreseeable consequence of deploying or using a high-risk artificial intelligence system to make a consequential decision. "Artificial intelligence" means technology that uses data to train statistical models for the purpose of enabling a computer system or service to autonomously perform any task, including visual perception, natural language processing, and speech recognition, that is normally associated with human intelligence or perception. "Artificial intelligence system" means any software that incorporates artificial intelligence. "Consequential decision" means any decision that has a material legal, or similarly significant, effect on a consumer's access to credit, criminal justice, education, employment, health care, housing, or insurance. "Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. "Consumer" does not include a natural person acting in a commercial or employment context. "Deployer" means any person doing business in the Commonwealth that deploys or uses a high-risk artificial intelligence system to make a consequential decision. "Developer" means any person doing business in the Commonwealth that develops or intentionally and substantially modifies a high-risk artificial intelligence system that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth. "Foundation model" means a machine learning model that (i) is trained on broad data at scale, (ii) is designed for generality of output, and (iii) can be adapted to a wide range of distinctive tasks. "Generative artificial intelligence" means artificial intelligence based on a foundation model that is capable of and used to produce synthetic digital content, including audio, images, text, and videos. "Generative artificial intelligence system" means any artificial intelligence system or service that incorporates generative artificial intelligence. "High-risk artificial intelligence system" means any artificial intelligence system that is specifically intended to autonomously make, or be a controlling factor in making, a consequential decision. A system or service is not a "high-risk artificial intelligence system" if it is intended to (i) perform a narrow procedural task, (ii) improve the result of a previously completed human activity, (iii) detect decision-making patterns or deviations from prior decision-making patterns and is not meant to replace or influence the previously completed human assessment without proper human review, or (iv) perform a preparatory task to an assessment relevant to a consequential decision. "Machine learning" means the development of algorithms to build data-derived statistical models that are capable of drawing inferences from previously unseen data without explicit human instruction. "Significant update" means any new version, new release, or other update to a high-risk artificial intelligence system that results in significant changes to such high-risk artificial intelligence system's use case or key functionality. "Synthetic digital content" means machine generated digital content, including any audio, image, text, or video that is produced by a generative artificial intelligence system.

Section 59.1-603 establishes the definitional foundation for the chapter. The key gating definition is high-risk artificial intelligence system, which is narrowed by four carve-outs for narrow procedural tasks, post-hoc human activity improvement, pattern-detection tools subject to human review, and preparatory assessment tasks. Consequential decision scopes the chapter to decisions with material legal or similarly significant effects across seven enumerated domains. The section also defines terms for generative AI, foundation models, and significant updates, though the chapter's operative obligations are limited to high-risk systems making consequential decisions.

Va. Code § 59.1-604

Operating standards for developers of high-risk artificial intelligence systems

Developer

(A) 1 No developer of a high-risk artificial intelligence system shall offer, sell, lease, give, or otherwise provide to a deployer a high-risk artificial intelligence system unless the developer makes available to the deployer (i) a statement disclosing the intended uses of such high-risk artificial intelligence system and (ii) documentation disclosing (a) the known limitations of such high-risk artificial intelligence system, including any and all reasonably foreseeable risks of algorithmic discrimination arising from the intended uses of such high-risk artificial intelligence system; (b) the purpose of such high-risk artificial intelligence system and the intended benefits and uses of such high-risk artificial intelligence system; (c) a summary describing how such high-risk artificial intelligence system was evaluated for performance and relevant information related to explainability before such high-risk artificial intelligence system was licensed or sold; (d) the measures the developer has taken to mitigate reasonable foreseeable risks of algorithmic discrimination that the developer knows arises from deployment or use of such high-risk artificial intelligence system; and (e) how an individual can use such high-risk artificial intelligence system to make, or monitor such high-risk artificial intelligence system when such high-risk artificial intelligence system is deployed or used to make, a consequential decision.

(B) 2 Each developer that offers, sells, leases, gives, or otherwise makes available to a deployer a high-risk artificial intelligence system shall make available to the deployer information and documentation in the developer's possession, custody, or control that is reasonably required to complete an impact assessment.

(C) Nothing in this section shall be construed to require a developer to disclose any trade secret or confidential or proprietary information.

(D) High-risk artificial intelligence systems that are in conformity with artificial intelligence standards, or parts thereof, shall be presumed to be in conformity with related requirements set out in this section and in associated regulations.

Section 59.1-604 establishes two distinct developer obligations. First, developers must provide deployers with a statement of intended uses and detailed documentation covering known limitations, algorithmic discrimination risks, performance evaluation summaries, mitigation measures, and human oversight instructions before making a high-risk AI system available. Second, developers must provide deployers with information reasonably required to complete an impact assessment. A trade-secret safe harbor in subsection (C) protects confidential and proprietary information from compelled disclosure. Subsection (D) creates a standards-conformity presumption — high-risk AI systems conforming to recognized AI standards are presumed compliant with the section's requirements.

Compliance actions 2 items

Developers must not provide a high-risk AI system to a deployer unless the developer makes available (1) a statement of intended uses and (2) documentation disclosing known limitations, algorithmic discrimination risks, performance evaluation summaries, mitigation measures, and instructions for human oversight of the system's consequential decisions. Trade secrets and proprietary information are exempt from disclosure.

G-02.1

Developers must make available to deployers all information and documentation in the developer's possession, custody, or control that is reasonably required for the deployer to complete an impact assessment of the high-risk AI system.

H-02

Va. Code § 59.1-605

Operating standards for deployers of high-risk artificial intelligence systems

Deployer

(A) 3 Each deployer of a high-risk artificial intelligence system shall avoid any risk of algorithmic discrimination that is a reasonably foreseeable consequence of deploying or using a high-risk artificial intelligence system to make a consequential decision.

(B) 4 No deployer shall deploy or use a high-risk artificial intelligence system to make a consequential decision unless the deployer has designed and implemented a risk management policy and program for such high-risk artificial intelligence system. The risk management policy shall specify the principles, processes, and personnel that the deployer shall use in maintaining the risk management program to identify, mitigate, and document any risk of algorithmic discrimination that is a reasonably foreseeable consequence of deploying or using such high-risk artificial intelligence system to make a consequential decision. Each risk management policy and program designed, implemented, and maintained pursuant to this subsection shall be (i) at least as stringent as the latest version of the Artificial Intelligence Risk Management Framework published by the National Institute of Standards and Technology or another nationally or internationally recognized risk management framework for artificial intelligence systems and (ii) reasonable considering (a) the size and complexity of the deployer; (b) the nature and scope of the high-risk artificial intelligence systems deployed and used by the deployer, including the intended uses of such high-risk artificial intelligence systems; (c) the sensitivity and volume of data processed in connection with the high-risk artificial intelligence systems deployed and used by the deployer; and (d) the cost to the deployer to implement and maintain such risk management program.

(C) 5 Except as provided in this subsection, no deployer shall deploy or use a high-risk artificial intelligence system to make a consequential decision unless the deployer has completed an impact assessment for such high-risk artificial intelligence system. The deployer shall complete an impact assessment for a high-risk artificial intelligence system (i) before the deployer initially deploys such high-risk artificial intelligence system and (ii) not later than 90 days after each significant update to such high-risk artificial intelligence system is made available. Each impact assessment completed pursuant to this subsection shall include, at a minimum: 1. A statement by the deployer disclosing (i) the purpose, intended use cases and deployment context of, and benefits afforded by the high-risk artificial intelligence system and (ii) whether the deployment or use of the high-risk artificial intelligence system poses a reasonably foreseeable risk of algorithmic discrimination and, if so, (a) the nature of such algorithmic discrimination and (b) the steps that have been taken, to the extent feasible, to mitigate such risk; 2. For each post-deployment impact assessment completed pursuant to this section, whether the intended use cases of the high-risk artificial intelligence system as updated were consistent with, or varied from, the developer's intended uses of such high-risk artificial intelligence system; 3. A description of (i) the categories of data the high-risk artificial intelligence system processes as inputs and (ii) the outputs such high-risk artificial intelligence system produces; 4. If the deployer used data to customize the high-risk artificial intelligence system, an overview of the categories of data the deployer used to customize such high-risk artificial intelligence system; 5. A description of any transparency measures taken concerning the high-risk artificial intelligence system, including any measures taken to disclose to a consumer in the Commonwealth that such high-risk artificial intelligence system is in use when such high-risk artificial intelligence system is in use; and 6. A description of any post-deployment monitoring performed and user safeguards provided concerning such high-risk artificial intelligence system, including any oversight process established by the deployer to address issues arising from deployment or use of such high-risk artificial intelligence system as such issues arise. A single impact assessment may address a comparable set of high-risk artificial intelligence systems deployed or used by a deployer. High-risk artificial intelligence systems that are in conformity with artificial intelligence standards, or parts thereof, shall be presumed to be in conformity with related requirements set out in this section and in associated regulations. If a deployer completes an impact assessment for the purpose of complying with another applicable law or regulation, such impact assessment shall be deemed to satisfy the requirements established in this subsection if such impact assessment is reasonably similar in scope and effect to the impact assessment that would otherwise be completed pursuant to this subsection. A deployer that completes an impact assessment pursuant to this subsection shall maintain such impact assessment and all records concerning such impact assessment for a reasonable period of time.

(D) 6 Not later than the time that a deployer uses a high-risk artificial intelligence system to make a consequential decision concerning an individual, the deployer shall notify the individual that the deployer is using a high-risk artificial intelligence system to make such consequential decision concerning such individual and provide to the individual a statement disclosing the purpose of such high-risk artificial intelligence system.

(E) 7 Each deployer shall make available, in a manner that is clear and readily available, a statement summarizing how such deployer manages any reasonably foreseeable risk of algorithmic discrimination that may arise from the use or deployment of the high-risk artificial intelligence system.

Section 59.1-605 imposes the bill's core deployer obligations across five subsections. Subsection (A) establishes a general duty to avoid reasonably foreseeable algorithmic discrimination. Subsection (B) requires deployers to design and implement a risk management policy and program at least as stringent as the NIST AI RMF, calibrated to the deployer's size, system sensitivity, data volume, and implementation cost. Subsection (C) requires pre-deployment and post-update impact assessments with six enumerated minimum content elements, plus record retention. Subsection (D) requires individual notification when a high-risk AI system is used to make a consequential decision. Subsection (E) requires publication of a summary describing how the deployer manages algorithmic discrimination risk. A standards-conformity presumption and cross-compliance safe harbor apply to the impact assessment requirement.

Compliance actions 5 items

Deployers must avoid any risk of algorithmic discrimination that is a reasonably foreseeable consequence of deploying or using a high-risk AI system to make a consequential decision.

H-02.1

Deployers must design and implement a risk management policy and program — at least as stringent as the NIST AI RMF or another nationally or internationally recognized framework — specifying the principles, processes, and personnel used to identify, mitigate, and document algorithmic discrimination risks. The program must be reasonable considering the deployer's size, system scope, data sensitivity, and implementation cost.

G-01.1

Deployers must complete an impact assessment before initial deployment and within 90 days of each significant update. Each assessment must include, at minimum: (1) purpose, use cases, deployment context, benefits, and any reasonably foreseeable algorithmic discrimination risks with mitigation steps; (2) for post-deployment assessments, whether updated use cases varied from the developer's intended uses; (3) categories of input data and outputs; (4) if applicable, data used to customize the system; (5) transparency measures taken; and (6) post-deployment monitoring and user safeguards. Assessments and all associated records must be maintained for a reasonable period. A cross-compliance safe harbor applies for assessments completed under other applicable laws of reasonably similar scope.

H-02.3

Deployers must notify individuals no later than the time the deployer uses a high-risk AI system to make a consequential decision concerning them, and must provide a statement disclosing the purpose of the system.

H-01.3

Deployers must make publicly available, in a clear and readily accessible manner, a statement summarizing how the deployer manages any reasonably foreseeable risk of algorithmic discrimination arising from deployment or use of a high-risk AI system.

H-02.5

Va. Code § 59.1-606

Exemptions

(A) Nothing in this chapter shall be construed to restrict a developer's or deployer's ability to (i) comply with federal, state, or municipal ordinances or regulations; (ii) comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, municipal, or other governmental authorities; (iii) cooperate with law-enforcement agencies concerning conduct or activity that the developer or deployer reasonably and in good faith believes may violate federal, state, or municipal ordinances or regulations; (iv) investigate, establish, exercise, prepare for, or defend legal claims; (v) provide a product or service specifically requested by a consumer; (vi) perform under a contract to which a consumer is a party, including fulfilling the terms of a written warranty; (vii) take steps at the request of a consumer prior to entering into a contract; (viii) take immediate steps to protect an interest that is essential for the life or physical safety of the consumer or another individual; (ix) prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any illegal activity, preserve the integrity or security of systems, or investigate, report, or prosecute those responsible for any such action; (x) engage in public or peer-reviewed scientific or statistical research in the public interest that adheres to all other applicable ethics and privacy laws and is approved, monitored, and governed by an institutional review board that determines, or similar independent oversight entities that determine, (a) that the expected benefits of the research outweigh the risks associated with such research and (b) whether the developer or deployer has implemented reasonable safeguards to mitigate the risks associated with such research; (xi) assist another developer or deployer with any of the obligations imposed by this chapter; or (xii) take any action that is in the public interest in the areas of public health, community health, or population health, but solely to the extent that such action is subject to suitable and specific measures to safeguard the public.

(B) The obligations imposed on developers or deployers by this chapter shall not restrict a developer's or deployer's ability to (i) conduct internal research to develop, improve, or repair products, services, or technologies; (ii) effectuate a product recall; (iii) identify and repair technical errors that impair existing or intended functionality; or (iv) perform internal operations that are reasonably aligned with the expectations of the consumer or reasonably anticipated based on the consumer's existing relationship with the developer or deployer.

(C) The obligations imposed on developers or deployers by this chapter shall not apply where compliance by the developer or deployer with such obligations would violate an evidentiary privilege under the laws of the Commonwealth.

(D) Nothing this chapter shall be construed to impose any obligation on a developer or deployer that adversely affects the rights or freedoms of any person, including the rights of any person to freedom of speech or freedom of the press guaranteed in the First Amendment to the Constitution of the United States or under the Virginia Human Rights Act (§ 2.2-3900 et seq.).

(E) If a developer or deployer engages in any action pursuant to an exemption set forth in this section, the developer or deployer bears the burden of demonstrating that such action qualifies for such exemption.

Section 59.1-606 establishes broad exemptions for developers and deployers. Subsection (A) carves out twelve categories of activity — including compliance with law, law enforcement cooperation, legal claims, consumer-requested services, security operations, IRB-approved research, and public health actions — from the chapter's obligations. Subsection (B) separately exempts internal research, product recalls, technical error correction, and operations reasonably aligned with consumer expectations. Subsection (C) preserves evidentiary privileges. Subsection (D) includes a First Amendment and Virginia Human Rights Act savings clause. Notably, subsection (E) places the burden of proving applicability of any exemption on the developer or deployer invoking it.

Va. Code § 59.1-607

Enforcement; civil penalty

DeployerDeveloper

(A) The Attorney General shall have exclusive authority to enforce the provisions of this chapter.

(B) Whenever the Attorney General has reasonable cause to believe that any person has engaged in or is engaging in any violation of this chapter, the Attorney General is empowered to issue a civil investigative demand. The provisions of § 59.1-9.10 shall apply mutatis mutandis to civil investigative demands issued pursuant to this section.

(C) Notwithstanding any contrary provision of law, the Attorney General may cause an action to be brought in the appropriate circuit court in the name of the Commonwealth to enjoin any violation of this chapter. The circuit court having jurisdiction may enjoin such violation notwithstanding the existence of an adequate remedy at law. In any action brought pursuant to this section, it shall not be necessary that damages be proved.

(D)–(E) Any person who violates the provisions of this chapter shall be subject to a civil penalty in an amount not to exceed $1,000 plus reasonable attorney fees, expenses, and court costs, as determined by the court. Any person who willfully violates the provisions of this chapter shall be subject to a civil penalty in amount not less than $1,000 and not more than $10,000 plus reasonable attorney fees, expenses, and court costs, as determined by the court. Such civil penalties shall be paid into the Literary Fund. Each violation of this chapter shall constitute a separate violation and shall be subject to any civil penalties imposed under this section.

(F) 8 The Attorney General may require that a developer disclose to the Attorney General any statement or documentation described in this chapter if such statement or documentation is relevant to an investigation conducted by the Attorney General. The Attorney General may also require that a deployer disclose to the Attorney General any risk management policy designed and implemented, impact assessment completed, or record maintained pursuant to this chapter if such risk management policy, impact assessment, or record is relevant to an investigation conducted by the Attorney General.

Section 59.1-607 vests exclusive enforcement authority in the Attorney General. The AG may issue civil investigative demands under the existing § 59.1-9.10 framework, bring circuit court actions for injunctive relief without proof of damages, and impose per-violation civil penalties up to $1,000 (or $1,000–$10,000 for willful violations) plus attorney fees and court costs. Subsection (F) separately authorizes the AG to compel production of developer documentation and deployer risk management policies, impact assessments, and records during investigations.

Compliance actions 1 item

Developers must disclose to the Attorney General any statement or documentation described in the chapter when relevant to an AG investigation. Deployers must disclose to the Attorney General any risk management policy, impact assessment, or record maintained under the chapter when relevant to an AG investigation.

R-02.2

Human Oversight Decision review · appeal pathways

5 items

H-02

H-02.1

Beginning Jul 1, 2026 Deployers must avoid any risk of algorithmic discrimination that is a reasonably foreseeable consequence of deploying or using a high-risk AI system to make a consequential decision.

H-02.3

Beginning Jul 1, 2026 Deployers must complete an impact assessment before initial deployment and within 90 days of each significant update. Each assessment must include, at minimum: (1) purpose, use cases, deployment context, benefits, and any reasonably foreseeable algorithmic discrimination risks with mitigation steps; (2) for post-deployment assessments, whether updated use cases varied from the developer's intended uses; (3) categories of input data and outputs; (4) if applicable, data used to customize the system; (5) transparency measures taken; and (6) post-deployment monitoring and user safeguards. Assessments and all associated records must be maintained for a reasonable period. A cross-compliance safe harbor applies for assessments completed under other applicable laws of reasonably similar scope.

H-01.3

Beginning Jul 1, 2026 Deployers must notify individuals no later than the time the deployer uses a high-risk AI system to make a consequential decision concerning them, and must provide a statement disclosing the purpose of the system.

H-02.5

Beginning Jul 1, 2026 Deployers must make publicly available, in a clear and readily accessible manner, a statement summarizing how the deployer manages any reasonably foreseeable risk of algorithmic discrimination arising from deployment or use of a high-risk AI system.

Governance Risk management · accountability programs

2 items

G-02.1

G-01.1

Beginning Jul 1, 2026 Deployers must design and implement a risk management policy and program — at least as stringent as the NIST AI RMF or another nationally or internationally recognized framework — specifying the principles, processes, and personnel used to identify, mitigate, and document algorithmic discrimination risks. The program must be reasonable considering the deployer's size, system scope, data sensitivity, and implementation cost.

Regulatory Reporting · disclosure · audit

1 item

R-02.2

Passage Likelihood

Failed

Status Failed

Final action Continued to 2025 with substitute in Communications, Technology and Innovation by voice vote

Legislative History

2024-01-09 Prefiled and ordered printed; offered 01/10/24 24105096D

2024-01-09 Referred to Committee on Communications, Technology and Innovation

2024-01-26 Assigned CT & I sub: Technology and Innovation

2024-02-05 Committee substitute posted to LIS only 24105785D-H1

2024-02-05 Continued to 2025 with substitute in Communications, Technology and Innovation by voice vote

Sources

Full Text ↗

Entry Last Reviewed

2026-05-16

AI generated