WHAT THIS BILL REGULATES · 1 REQUIREMENT TYPE
How Is This Bill Enforced
Verbatim statutory text on the left; plain-language analysis and a per-section checklist on the right. Numbered markers cross-link to the matching checklist row.
As used in this chapter, unless the context requires a different meaning: "Artificial intelligenceArtificial intelligence"Artificial intelligence" means a set of technologies that enables machines to perform tasks under varying and unpredictable circumstances that typically require human oversight or intelligence, or that can learn from experience and improve performance when exposed to data sets.§ 59.1-607" means a set of technologies that enables machines to perform tasks under varying and unpredictable circumstances that typically require human oversight or intelligence, or that can learn from experience and improve performance when exposed to data sets. "Artificial intelligence systemArtificial intelligence system"Artificial intelligence system" means any machine-based system that, for any explicit or implicit objective, infers from the inputs such system receives how to generate outputs, including content, decisions, predictions, and recommendations, that can influence physical or virtual environments.§ 59.1-607" means any machine-based system that, for any explicit or implicit objective, infers from the inputs such system receives how to generate outputs, including content, decisions, predictions, and recommendations, that can influence physical or virtual environments. "Capture deviceCapture device"Capture device" means a device that can take digital photographs or digitally record audio or visual content, including digital videography and photography cameras, mobile phones, and digital voice recorders. "Capture device" does not include film cameras or phonographs.§ 59.1-607" means a device that can take digital photographs or digitally record audio or visual content, including digital videography and photography cameras, mobile phones, and digital voice recorders. "Capture deviceCapture device"Capture device" means a device that can take digital photographs or digitally record audio or visual content, including digital videography and photography cameras, mobile phones, and digital voice recorders. "Capture device" does not include film cameras or phonographs.§ 59.1-607" does not include film cameras or phonographs. "ControllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607" means the same as that term is defined in § 59.1-575. "DeveloperDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607 that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth. "Digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607" means any content in digital form, including any audio, image, text, or video content. "Foundation modelFoundation model"Foundation model" means a machine learning model that (i) is trained on broad data at scale, (ii) is designed for generality of output, and (iii) can be adapted to a wide range of distinctive tasks.§ 59.1-607" means a machine learningMachine learning"Machine learning" means the development of algorithms to build data-derived statistical models that are capable of drawing inferences from previously unseen data without explicit human instruction.§ 59.1-607 model that (i) is trained on broad data at scale, (ii) is designed for generality of output, and (iii) can be adapted to a wide range of distinctive tasks. "General-purpose artificial intelligence modelGeneral-purpose artificial intelligence model"General-purpose artificial intelligence model" means any form of artificial intelligence system that (i) displays significant generality, (ii) is capable of competently performing a wide range of distinct tasks, and (iii) can be integrated into a variety of downstream applications or systems. "General-purpose artificial intelligence model" does not include any artificial intelligence system that is used for development, prototyping, and research activities before such artificial intelligence system is released on the market.§ 59.1-607" means any form of artificial intelligence systemArtificial intelligence system"Artificial intelligence system" means any machine-based system that, for any explicit or implicit objective, infers from the inputs such system receives how to generate outputs, including content, decisions, predictions, and recommendations, that can influence physical or virtual environments.§ 59.1-607 that (i) displays significant generality, (ii) is capable of competently performing a wide range of distinct tasks, and (iii) can be integrated into a variety of downstream applications or systems. "General-purpose artificial intelligence modelGeneral-purpose artificial intelligence model"General-purpose artificial intelligence model" means any form of artificial intelligence system that (i) displays significant generality, (ii) is capable of competently performing a wide range of distinct tasks, and (iii) can be integrated into a variety of downstream applications or systems. "General-purpose artificial intelligence model" does not include any artificial intelligence system that is used for development, prototyping, and research activities before such artificial intelligence system is released on the market.§ 59.1-607" does not include any artificial intelligence systemArtificial intelligence system"Artificial intelligence system" means any machine-based system that, for any explicit or implicit objective, infers from the inputs such system receives how to generate outputs, including content, decisions, predictions, and recommendations, that can influence physical or virtual environments.§ 59.1-607 that is used for development, prototyping, and research activities before such artificial intelligence systemArtificial intelligence system"Artificial intelligence system" means any machine-based system that, for any explicit or implicit objective, infers from the inputs such system receives how to generate outputs, including content, decisions, predictions, and recommendations, that can influence physical or virtual environments.§ 59.1-607 is released on the market. "Generative artificial intelligenceGenerative artificial intelligence"Generative artificial intelligence" means artificial intelligence based on a foundation model that is capable of and used to produce synthetic digital content, including audio, images, text, and videos.§ 59.1-607" means artificial intelligenceArtificial intelligence"Artificial intelligence" means a set of technologies that enables machines to perform tasks under varying and unpredictable circumstances that typically require human oversight or intelligence, or that can learn from experience and improve performance when exposed to data sets.§ 59.1-607 based on a foundation modelFoundation model"Foundation model" means a machine learning model that (i) is trained on broad data at scale, (ii) is designed for generality of output, and (iii) can be adapted to a wide range of distinctive tasks.§ 59.1-607 that is capable of and used to produce synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607, including audio, images, text, and videos. "Generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607" means any artificial intelligence systemArtificial intelligence system"Artificial intelligence system" means any machine-based system that, for any explicit or implicit objective, infers from the inputs such system receives how to generate outputs, including content, decisions, predictions, and recommendations, that can influence physical or virtual environments.§ 59.1-607 or service that incorporates generative artificial intelligenceGenerative artificial intelligence"Generative artificial intelligence" means artificial intelligence based on a foundation model that is capable of and used to produce synthetic digital content, including audio, images, text, and videos.§ 59.1-607. "Machine learningMachine learning"Machine learning" means the development of algorithms to build data-derived statistical models that are capable of drawing inferences from previously unseen data without explicit human instruction.§ 59.1-607" means the development of algorithms to build data-derived statistical models that are capable of drawing inferences from previously unseen data without explicit human instruction. "Online service, product, or featureOnline service, product, or feature"Online service, product, or feature" means the same as that term is defined in § 59.1-575.§ 59.1-607" means the same as that term is defined in § 59.1-575. "Provenance application toolProvenance application tool"Provenance application tool" means an online service, product, or feature that enables a user to apply provenance data, either directly or through the use of third-party technologies, to synthetic digital content.§ 59.1-607" means an online service, product, or featureOnline service, product, or feature"Online service, product, or feature" means the same as that term is defined in § 59.1-575.§ 59.1-607 that enables a userUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607 to apply provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607, either directly or through the use of third-party technologies, to synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607. "Provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607" means information, such as the origin of a piece of digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607 and the history of modifications to the digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607 is synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607 and (ii) when there is synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607, the name of the developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607 whose generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607 generated the synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607. "Provenance readerProvenance reader"Provenance reader" means an online service, product, or feature that enables a user to view the provenance data, if any, of synthetic digital content.§ 59.1-607" means an online service, product, or featureOnline service, product, or feature"Online service, product, or feature" means the same as that term is defined in § 59.1-575.§ 59.1-607 that enables a userUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607 to view the provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607, if any, of synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607. "Significant updateSignificant update"Significant update" means any new version, new release, or other update to a generative artificial intelligence system or service that results in significant changes to such system's or service's use case or key functionality.§ 59.1-607" means any new version, new release, or other update to a generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607 that results in significant changes to such system's or service's use case or key functionality. "Synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607" means any digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607. "UserUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607" means a person who uses an online service, product, or featureOnline service, product, or feature"Online service, product, or feature" means the same as that term is defined in § 59.1-575.§ 59.1-607, including a generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607, or who uses a capture deviceCapture device"Capture device" means a device that can take digital photographs or digitally record audio or visual content, including digital videography and photography cameras, mobile phones, and digital voice recorders. "Capture device" does not include film cameras or phonographs.§ 59.1-607.
This section establishes the definitional framework for the Digital Content Authenticity and Transparency Act. Key defined terms include Developer (any person in Virginia that develops or significantly updates a generative AI system offered to Virginia consumers), Controller (cross-referenced to Virginia's Consumer Data Protection Act definition at § 59.1-575), provenance data (origin and modification history in a standards-compliant format identifying whether content is synthetic and, if so, which developer's system generated it), and synthetic digital content (audio, image, or video produced or manipulated by a generative AI system). The provenance data definition is notable for requiring compliance with widely adopted standard-setting body specifications — effectively mandating interoperable provenance standards such as C2PA.
(A) 1 A developer of a generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607 shall apply provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607, either directly or through the use of third-party technologies, to synthetic digital contentSynthetic digital content"Synthetic digital content" means any digital content, including any audio, image, or video, that is produced or manipulated by a generative artificial intelligence system or service.§ 59.1-607 that is wholly generated by such developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607's generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607.
(B) 2 A developer of a generative artificial intelligence system or serviceGenerative artificial intelligence system or service"Generative artificial intelligence system or service" means any artificial intelligence system or service that incorporates generative artificial intelligence.§ 59.1-607 shall make available to the public: 1. A provenance application toolProvenance application tool"Provenance application tool" means an online service, product, or feature that enables a user to apply provenance data, either directly or through the use of third-party technologies, to synthetic digital content.§ 59.1-607; and 2. A provenance readerProvenance reader"Provenance reader" means an online service, product, or feature that enables a user to view the provenance data, if any, of synthetic digital content.§ 59.1-607.
This section imposes two core obligations on developers of generative AI systems or services. First, developers must embed standards-compliant provenance data into synthetic digital content that is wholly generated by their systems — this is an automated, point-of-generation embedding requirement rather than a post-hoc labeling obligation. Second, developers must make publicly available both a provenance application tool (enabling users to apply provenance data to content) and a provenance reader (enabling users to view provenance data). The public-tool obligations create a downstream verification ecosystem — anyone can check whether content carries provenance data and, if so, which developer's system generated it.
(A) 3 A controller of an online service, product, or featureOnline service, product, or feature"Online service, product, or feature" means the same as that term is defined in § 59.1-575.§ 59.1-607 shall retain any available provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607 in the digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607 provided to such service, product, or feature and shall make available to a userUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607 either (i) the provenance data of the digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607, (ii) a conspicuous indicator of whether provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607 is or is not available for the digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607, or (iii) both clauses (i) and (ii).
(B) 4 A capture deviceCapture device"Capture device" means a device that can take digital photographs or digitally record audio or visual content, including digital videography and photography cameras, mobile phones, and digital voice recorders. "Capture device" does not include film cameras or phonographs.§ 59.1-607 shall include a provenance application toolProvenance application tool"Provenance application tool" means an online service, product, or feature that enables a user to apply provenance data, either directly or through the use of third-party technologies, to synthetic digital content.§ 59.1-607 that is made known and available to the userUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607 and that the userUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607 may use to apply provenance dataProvenance data"Provenance data" means information, such as the origin of a piece of digital content and the history of modifications to the digital content, that is in a format which is compliant with widely adopted guidelines or specifications promulgated by an established standard-setting body, and which includes (i) whether some or all of the digital content is synthetic digital content and (ii) when there is synthetic digital content, the name of the developer whose generative artificial intelligence system or service generated the synthetic digital content.§ 59.1-607 to the digital contentDigital content"Digital content" means any content in digital form, including any audio, image, text, or video content.§ 59.1-607 captured with such device. A provenance application toolProvenance application tool"Provenance application tool" means an online service, product, or feature that enables a user to apply provenance data, either directly or through the use of third-party technologies, to synthetic digital content.§ 59.1-607 shall be enabled on a capture deviceCapture device"Capture device" means a device that can take digital photographs or digitally record audio or visual content, including digital videography and photography cameras, mobile phones, and digital voice recorders. "Capture device" does not include film cameras or phonographs.§ 59.1-607 unless the userUser"User" means a person who uses an online service, product, or feature, including a generative artificial intelligence system or service, or who uses a capture device.§ 59.1-607 disables such tool.
This section imposes provenance data obligations on two distinct actor types: controllers of online services and capture device manufacturers. Controllers must retain any provenance data present in digital content provided to their platform and surface it to users — either by displaying the provenance data itself, a conspicuous indicator of whether provenance data is available, or both. This is a retention-and-display obligation, not a scanning or detection obligation — the controller is required to preserve and surface what is already embedded, not to independently determine whether content is AI-generated.
Capture device manufacturers must include a provenance application tool that is enabled by default and made known to the user. The default-on requirement ensures provenance data is applied to device-captured content unless the user affirmatively opts out.
(A) The Attorney General shall have the exclusive authority to enforce the provisions of this chapter.
(B) Whenever the Attorney General has reasonable cause to believe that any person has engaged in or is engaging in any violation of this chapter, the Attorney General is empowered to issue a civil investigative demand. The provisions of § 59.1-9.10 shall apply mutatis mutandis to civil investigative demands issued pursuant to this section.
(C) Notwithstanding any contrary provision of law, the Attorney General may bring an action in the appropriate circuit court in the name of the Commonwealth to enjoin any violation of this chapter. The circuit court having jurisdiction may enjoin such violation notwithstanding the existence of an adequate alternative remedy at law. In any action brought pursuant to this chapter, it shall not be necessary that damages be proved.
(D) Any person who violates the provisions of this chapter shall be subject to a civil penalty in an amount not to exceed $1,000 plus reasonable attorney fees, expenses, and costs, as determined by the court. Any person who willfully violates the provisions of this chapter shall be subject to a civil penalty in an amount of not less than $1,000 and not more than $10,000 plus reasonable attorney fees, expenses, and costs, as determined by the court. Such civil penalties shall be paid into the Literary Fund.
(E) Each violation of this chapter shall constitute a separate violation and shall be subject to any civil penalties imposed under this section.
(F) Prior to causing an action against a developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607, a controllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607, or any other person for a violation of this chapter pursuant to subsection C, the Attorney General shall determine if it is possible to cure the violation. If it is possible to cure such violation, the Attorney General may issue a notice of violation to a developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607, a controllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607, or any other person and afford such developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607, controllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607, or person the opportunity to cure such violation within 30 days of the receipt of such notice of violation. In determining whether to grant such opportunity to cure such violation, the Attorney General shall consider (i) the number of prior violations; (ii) the size and complexity of the developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607, controllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607, or person; (iii) the nature and extent of the developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607, controllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607, or person's business; (iv) the substantial likelihood of injury to the public; (v) the safety of persons or property; and (vi) whether such violation was likely caused by human or technical error. If the developerDeveloper"Developer" means any person doing business in the Commonwealth that develops or significantly updates a generative artificial intelligence system or service that is offered, sold, leased, given, or otherwise provided to consumers in the Commonwealth.§ 59.1-607, controllerController"Controller" means the same as that term is defined in § 59.1-575.§ 59.1-607, or person fails to cure such violation within 30 days of the receipt of such notice or violation, the Attorney General may proceed with such action.
This section vests exclusive enforcement authority in the Virginia Attorney General. The AG may issue civil investigative demands (cross-referencing Virginia's antitrust CID procedures at § 59.1-9.10) and may bring actions for injunctive relief without proof of damages. Civil penalties are tiered: up to $1,000 per non-willful violation and $1,000–$10,000 per willful violation, plus reasonable attorney fees, expenses, and costs. Each violation constitutes a separate violation for penalty purposes.
Before bringing an action, the AG must determine whether the violation is curable. If so, the AG may — but is not required to — issue a 30-day notice of violation allowing the developer, controller, or other person to cure. The discretionary cure period is conditioned on six enumerated factors, including prior violations, entity size, nature of business, likelihood of public injury, safety considerations, and whether the violation was caused by human or technical error. This is a softer cure regime than some state AI bills, which mandate cure opportunities; here the AG retains discretion.