Virginia VITA EA400 AI Utilization Policy (Executive Branch AI deployment standard, 2026)

Virginia VITA EA400 Artificial Intelligence (AI) Utilization Policy — All Executive Branch Agencies and Institutions of Higher Education Must Demonstrate Positive Citizen Outcome and Obtain VITA Approval Before Deploying AI (Updated June 2026)
Virginia · Virginia VITA Enterprise Architecture Standard EA400, Artificial Intelligence (AI) Utilization Policy (updated June 2026); Va. Code § 2.2-2005 et seq.

Status
In effect
Took effect
June 1, 2026
Applies to
All Virginia Executive Branch state agencies and institutions of higher education
Enforced by
Virginia Information Technologies Agency (VITA) — administers EA standards; Chief Information Officer of the Commonwealth

Virginia's IT governance agency (VITA) published an updated Artificial Intelligence (AI) Utilization Policy (standard EA400) in June 2026. The policy applies to all Virginia Executive Branch state agencies and institutions of higher education. Before deploying any AI capability, an agency must satisfy three conditions: (1) there is a positive outcome for citizens; (2) AI is the optimal solution for the problem; and (3) a regulatory impact analysis has been completed. Agencies must register all AI use cases with VITA before deployment, and VITA maintains a central AI registry to track and approve new use cases across state government. The policy is an internal governance standard — it governs how state agencies use AI, not how private entities must behave.

Who is protected: Virginia residents interacting with state government AI systems, through a requirement that agencies demonstrate positive citizen outcome before deploying AI

Legal detail

Virginia VITA Enterprise Architecture Standard EA400 — Artificial Intelligence (AI) Utilization Policy (updated June 2026). AUTHORITY: Virginia IT Agency (VITA) under Va. Code § 2.2-2005 et seq. (VITA IT governance authority for Executive Branch). SCOPE: All Executive Branch state agencies and institutions of higher education (colleges/universities that use state IT systems). DEPLOYMENT CONDITIONS — before deploying any AI capability, the agency must demonstrate: (1) POSITIVE CITIZEN OUTCOME: AI use must result in a positive outcome for citizens; (2) OPTIMAL SOLUTION: AI must be the optimal solution for the identified problem; (3) REGULATORY IMPACT ANALYSIS: agency must complete a regulatory impact analysis prior to deployment. REGISTRY REQUIREMENT: all AI use cases must be registered with VITA prior to deployment; VITA maintains a central AI registry for analysis and approval of new AI use cases across state government. GOVERNANCE MECHANISM: policy is implemented through VITA's Enterprise Architecture standards program; compliance is mandatory for all covered entities under VITA's IT governance authority. LIMITATIONS: this is an internal government IT governance policy; it does not create private rights of action for citizens, does not apply to private entities, and does not carry independent statutory penalty provisions beyond VITA's existing IT governance enforcement authority. SOURCE: vita.virginia.gov official PDF (EA400 standard document).

Key facts

JurisdictionVirginia
LevelState
StrengthLimited
EnactedJune 1, 2026
CitationVirginia VITA Enterprise Architecture Standard EA400, Artificial Intelligence (AI) Utilization Policy (updated June 2026); Va. Code § 2.2-2005 et seq.
Private right of actionNo, agency enforcement only
PenaltiesVITA IT governance enforcement; non-compliant deployments may be required to register or cease operation; no standalone penalty provision stated in policy
Topicsgovernment use of AI · automated decision-making · AI disclosure and transparency
Agency pageArtificial Intelligence (AI) Utilization Policy EA400 — Virginia Information Technologies Agency (VITA)

More AI rules in Virginia

Related government use of AI rules elsewhere

See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.