Virginia VITA EA400 AI Utilization Policy (Executive Branch AI deployment standard, 2026)
Virginia VITA EA400 Artificial Intelligence (AI) Utilization Policy — All Executive Branch Agencies and Institutions of Higher Education Must Demonstrate Positive Citizen Outcome and Obtain VITA Approval Before Deploying AI (Updated June 2026)
Virginia · Virginia VITA Enterprise Architecture Standard EA400, Artificial Intelligence (AI) Utilization Policy (updated June 2026); Va. Code § 2.2-2005 et seq.
- Status
- In effect
- Took effect
- June 1, 2026
- Applies to
- All Virginia Executive Branch state agencies and institutions of higher education
- Enforced by
- Virginia Information Technologies Agency (VITA) — administers EA standards; Chief Information Officer of the Commonwealth
Virginia's IT governance agency (VITA) published an updated Artificial Intelligence (AI) Utilization Policy (standard EA400) in June 2026. The policy applies to all Virginia Executive Branch state agencies and institutions of higher education. Before deploying any AI capability, an agency must satisfy three conditions: (1) there is a positive outcome for citizens; (2) AI is the optimal solution for the problem; and (3) a regulatory impact analysis has been completed. Agencies must register all AI use cases with VITA before deployment, and VITA maintains a central AI registry to track and approve new use cases across state government. The policy is an internal governance standard — it governs how state agencies use AI, not how private entities must behave.
Who is protected: Virginia residents interacting with state government AI systems, through a requirement that agencies demonstrate positive citizen outcome before deploying AI
Legal detail
Virginia VITA Enterprise Architecture Standard EA400 — Artificial Intelligence (AI) Utilization Policy (updated June 2026). AUTHORITY: Virginia IT Agency (VITA) under Va. Code § 2.2-2005 et seq. (VITA IT governance authority for Executive Branch). SCOPE: All Executive Branch state agencies and institutions of higher education (colleges/universities that use state IT systems). DEPLOYMENT CONDITIONS — before deploying any AI capability, the agency must demonstrate: (1) POSITIVE CITIZEN OUTCOME: AI use must result in a positive outcome for citizens; (2) OPTIMAL SOLUTION: AI must be the optimal solution for the identified problem; (3) REGULATORY IMPACT ANALYSIS: agency must complete a regulatory impact analysis prior to deployment. REGISTRY REQUIREMENT: all AI use cases must be registered with VITA prior to deployment; VITA maintains a central AI registry for analysis and approval of new AI use cases across state government. GOVERNANCE MECHANISM: policy is implemented through VITA's Enterprise Architecture standards program; compliance is mandatory for all covered entities under VITA's IT governance authority. LIMITATIONS: this is an internal government IT governance policy; it does not create private rights of action for citizens, does not apply to private entities, and does not carry independent statutory penalty provisions beyond VITA's existing IT governance enforcement authority. SOURCE: vita.virginia.gov official PDF (EA400 standard document).
Key facts
| Jurisdiction | Virginia |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | June 1, 2026 |
| Citation | Virginia VITA Enterprise Architecture Standard EA400, Artificial Intelligence (AI) Utilization Policy (updated June 2026); Va. Code § 2.2-2005 et seq. |
| Private right of action | No, agency enforcement only |
| Penalties | VITA IT governance enforcement; non-compliant deployments may be required to register or cease operation; no standalone penalty provision stated in policy |
| Topics | government use of AI · automated decision-making · AI disclosure and transparency |
| Agency page | Artificial Intelligence (AI) Utilization Policy EA400 — Virginia Information Technologies Agency (VITA) |
More AI rules in Virginia
- Virginia FY2026-2028 Biennial Budget: Data Center Electricity Tax… · Enacted (not yet in effect)
- Virginia § 15.2-1723.2 (facial recognition by local law enforcement, eff. July 1, 2026) · In effect
- Virginia IVO AI Safety Study (SB 384/HB 797, 2026) · In effect
- Virginia SCC data center transmission cost order (2026) · In effect
- Virginia § 15.2-2209.5 data center siting disclosure law (2026) · In effect
- Virginia EO 22 (2026) — data center accountability + AI task force · In effect
Related government use of AI rules elsewhere
- CA EO N-6-26 (AI Workforce) · In effect
- WA SB 5982 (Data Center / Clean Energy) · In effect
- Arkansas public entity AI/ADS policy mandate (Act 848, 2025) · In effect
- Inver Grove Heights MN data center moratorium amended under lawsuit (2026) · In effect
- FERC order directing PJM and other grid operators to reform tariffs on… · Enacted (not yet in effect)
- San Marcos citywide data center ban (Land Use Matrix amendment) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.