What does Virginia require right now?

Directs VDOE to develop guidance for safe AI instructional use and creates an AI pilot program to fund and evaluate AI-based instructional tools in K-12 schools. Explicitly contemplates AI systems used for instruction and tutoring. Tools vetted against state guidance including equity, privacy, and human-in-the-loop expectations. In force July 1, 2026 (enacted with companion HB 1186 as 2026 Acts cc. 937 and 943). Guidance must address DPAs that prohibit use of division or student data to train external AI models; approved AIS use must give teachers transcript access plus monitoring dashboards, alerts, and audit logs. No adoption deadline and no penalty stated in the statute.

First comprehensive state privacy law in the South. Grants consumers rights to access, correct, delete, and opt out of sale, targeted advertising, and profiling. Requires data protection assessments for high-risk activities including processing sensitive data and profiling. Controllers must obtain consent for sensitive data processing. Districts operating as data controllers must verify vendor data processing agreements cover VCDPA requirements.