HB 797: Artificial intelligence; framework for person/entity acting as an independent verification org. - Virginia

General Government and Capital Outlay Subcommittee Substitute → General Laws and Technology Substitute · 5 edits

MODERATE

The bill was significantly rewritten to shift from immediately establishing a licensing system for AI verification organizations to first requiring a feasibility study. The original version mandated the creation of an Artificial Intelligence Safety Advisory Council and gave the CIO authority to license and regulate independent verification organizations. The new version replaces these immediate regulatory actions with a directive for the Joint Commission on Technology and Science to evaluate the risks, metrics, and fiscal impact of such a system before any framework is developed.

Scope change

The bill's scope changed from an immediate regulatory mandate to a preliminary research and evaluation phase. It no longer creates the Artificial Intelligence Safety Advisory Council or authorizes the CIO to issue licenses, but instead tasks the Joint Commission on Technology and Science with studying the concept first.

REQUIREMENT

Removed the immediate establishment of the Artificial Intelligence Safety Advisory Council and the CIO's authority to license independent verification organizations.

DEFINITION

Removed detailed statutory definitions for terms like 'independent verification organization,' 'deployer,' 'developer,' and 'security vendor'.

ENFORCEMENT

Removed specific provisions regarding license revocation, annual reporting requirements for verification bodies, and liability limitations for the state.

TIMELINE

Added a requirement for the Joint Commission on Technology and Science to submit a feasibility report to legislative committee chairs by November 1, 2026.

SCOPE

Added a directive for the Joint Commission to evaluate specific factors including risk metrics, existing standards, and the fiscal impact of a potential verification framework.

General Laws and Technology Substitute → Chaptered · 2 edits

MINOR

The bill was converted from a Senate substitute amendment into a formally enacted chapter of the Virginia Acts of Assembly. The substantive policy content regarding the Joint Commission's evaluation of AI verification frameworks remains identical, but the document now includes official approval dates and chapter numbers, signifying it has become law.

Scope change

The scope of the bill's applicability has not changed; it remains a directive for the Joint Commission on Technology and Science to evaluate AI verification frameworks.

TECHNICAL

Removed metadata headers (session type, bill number, amendment status) and added official chapter formatting, approval date, and act title.

Changed the text layout from a list of removed lines to a formatted, multi-line statutory text suitable for publication in the code.

Appropriations Substitute → General Government and Capital Outlay Subcommittee Substitute · 1 edit

MINOR

The bill text was reformatted from a standard legislative layout to a 'House Substitute' version with different header styling and line numbering. The substantive policy language regarding the licensing of AI verification organizations, definitions, and council requirements remains identical.

Scope change

No change in scope or applicability; the bill covers the same Virginia Information Technologies Agency duties and AI safety standards.

TECHNICAL

The document layout was changed from a standard 'Appropriations Substitute' format to a 'House Substitute' format, including updated headers and line numbering.

Communications Subcommittee Substitute → Appropriations Substitute · 4 edits

MODERATE

The bill was transferred from the Communications Committee to the Appropriations Committee, changing the legislative focus from technology policy to budgetary oversight. The scope of the new article was expanded to include section 2.2-2034.8, and the licensing authority was modified from a mandatory duty to a discretionary power, allowing the agency to choose whether to issue licenses.

Scope change

The bill's scope was expanded to include a new section (2.2-2034.8) and the committee jurisdiction shifted from Communications to Appropriations, indicating a change in the bill's primary focus to funding and budgetary implications.

ELIGIBILITY

The CIO's duty to license independent verification organizations was changed from mandatory to discretionary, meaning the agency can now choose whether to issue licenses.

SCOPE

A new section (2.2-2034.8) was added to the article, expanding the legislative scope beyond the original seven sections.

REQUIREMENT

The requirement for applicants to file an application was rephrased to clarify that only those seeking a license must submit an application, while the agency retains the discretion to reject applicants.

ENFORCEMENT

The language regarding license revocation was adjusted to reflect the discretionary nature of the licensing authority, allowing the agency to revoke licenses if the public interest requires it.

Communications, Technology and Innovation Substitute → Communications Subcommittee Substitute · 1 edit

MINOR

The bill text was reformatted from a standard plain-text layout to a version with embedded page numbers, line numbers, and document headers, but the actual legislative language and policy content remain identical. No substantive changes to the law were made.

TECHNICAL

The text structure was altered to include line numbers, page markers, and document metadata (e.g., '2/2/26 13:21', 'HB797H2'), while the legal provisions regarding AI verification organizations and the CIO's duties remained exactly the same.

Enrolled → Communications, Technology and Innovation Substitute · 5 edits

MODERATE

The bill was converted from a temporary study request into a permanent law that establishes a new licensing system for independent AI verification organizations. The Virginia Information Technologies Agency (VITA) is now authorized to license these organizations, which must meet strict standards for conflict of interest, funding transparency, and risk assessment to verify AI safety.

Scope change

The bill's scope changed from a one-time evaluation of feasibility to an active regulatory framework. It now applies to any person or entity seeking to act as an independent verification organization for AI models within Virginia.

REQUIREMENT

Created a new licensing requirement for independent verification organizations (IVOs) administered by the Virginia Information Technologies Agency.

Mandated that IVO regulations include strict conflict of interest rules, funding transparency reporting, and board composition audits to ensure industry independence.

Required applicants to submit detailed plans covering risk definitions, measurable metrics, mitigation procedures, and ongoing monitoring protocols.

DEFINITION

Added specific legal definitions for key terms including 'deployer', 'developer', 'security vendor', and 'independent verification organization'.

ENFORCEMENT

Established provisions for corrective action or license revocation if an organization fails to meet safety standards or good standing requirements.

Introduced → Enrolled · 5 edits · Apr 8, 2026

MODERATE

The bill was fundamentally rewritten from a comprehensive regulatory framework into a study directive. The original version established a licensing system for independent verification organizations (IVOs) to audit AI safety, including specific duties for the CIO, detailed application requirements, and an advisory council. The new version removes all licensing rules and instead directs the Joint Commission on Technology and Science to evaluate the feasibility of creating such a framework and report back by November 1, 2026.

Scope change

The bill's scope shifted from immediate implementation of a regulatory regime to a preliminary study and feasibility analysis of that regime.

REQUIREMENT

All provisions establishing the licensing of Independent Verification Organizations (IVOs), including application plans, fees, and renewal processes, were deleted.

DEFINITION

Specific legal definitions for terms like 'Independent verification organization,' 'Deployer,' and 'Security vendor' were removed.

ENFORCEMENT

Provisions regarding license revocation, corrective actions, and annual reporting requirements for IVOs were eliminated.

TIMELINE

A new deadline was added requiring the Joint Commission on Technology and Science to submit a feasibility report by November 1, 2026.

ELIGIBILITY

The bill now mandates that the Joint Commission evaluate the viability of using the Virginia Information Technologies Agency to manage any future licensing scheme.

Artificial intelligence; framework for person/entity acting as an independent verification org.

What changed between versions

How they voted

Actions timeline

Sponsors