Skip to content
Virginia — State Signal · Loop + Ledger
Loop + Ledger › Signal › States › Virginia
Signal · Virginia Live

What does Virginia require
right now?

The current bills, deadlines, enforcement patterns, and what your district should actually be doing about it.

curated by Loop + Ledger

Active Legislation Updated Sat Jul 25, 2026 Source lis.virginia.gov
Laws tracked
4
In this state
Enacted
3
On the books
In motion
1
Actively moving
Most recently enacted
What just became law?
Enacted
Va. Code § 59.1-575 et seq.Virginia Consumer Data Protection Act (VCDPA)
First comprehensive state privacy law in the South. Grants consumers rights to access, correct, delete, and opt out of sale, targeted advertising, and profiling. Requires data protection assessments for high-risk activities including processing sensitive data and profiling. Controllers must obtain consent for sensitive data processing.
Effective: Jan 01, 2023Source →
Watch list
What's coming up?
No upcoming deadlines on the tracker.
Also on the books
What else is enacted?
Enacted
SB 394 (2026)SB 394 — Safe AI Instructional Use Guidance and Pilot Program
Directs VDOE to develop guidance for safe AI instructional use and creates an AI pilot program to fund and evaluate AI-based instructional tools in K-12 schools. Explicitly contemplates AI systems used for instruction and tutoring. Tools vetted against state guidance including equity, privacy, and human-in-the-loop expectations.
Source →
Enacted
HB 2094 (2025)HB 2094 — K-12 AI Use Guidelines
Directs the Virginia Department of Education to develop K-12 AI use guidelines focused on student data privacy, teacher training, and responsible deployment. Guidelines will address equity, bias mitigation, and documentation of AI behavior, especially when tools influence grades, placement, or discipline. Districts expected to align local policies to state guidance.
Source →
In motion
What's active right now?
ACTIVE
Va. Code §59.1-571 et seq.Virginia Consumer Data Protection Act (VCDPA)
Broad consumer data law. Districts operating as data controllers must verify vendor data processing agreements cover VCDPA requirements.
— EdTech vendor implications — a good entry point for DPA audit conversations.
Source →
Book a working session
A 20-minute working session on Virginia compliance.
See clearly.
Act strategically.
Protect what matters.
Start the conversation →