DefeatedHB 2094 (2025)

Virginia High-Risk Artificial Intelligence Developer and Deployer Act: Compliance Checklist

A practical checklist of the main obligations to satisfy under this law.

Compliance checklist

Run through these items to scope your obligations under Virginia High-Risk Artificial Intelligence Developer and Deployer Act. Not legal advice; verify with counsel before acting.

  1. Confirm scope: does the law apply to your operations? See Who Must Comply or use the Compliance Checker.
  2. Inventory in-scope AI systems and classify them by role (developer/deployer) and decision type.
  3. Adopt a federal control framework: NIST AI RMF or ISO/IEC 42001 to demonstrate due care.
  4. Document evidence of compliance for each obligation, refreshed at the cadence the law requires.
  5. Build the AG-notification path if the law requires it (Colorado, California SB 53).
  6. Set the refresh cadence — annual for most impact-assessment regimes; continuous for monitoring.
More on this law

We may receive referral commissions from recommended compliance tools. Recommendations are based on product fit and not on commission size. Links marked “partner link” include a tracked redirect.