Virginia HB 2094: Vetoed — What It Means for AI Compliance

Update (May 2026): Governor Glenn Youngkin vetoed Virginia HB 2094 on March 24, 2025. The bill never became law. There are no compliance obligations under HB 2094. This article has been updated to reflect the veto and its implications.

---

What Was Virginia HB 2094?

HB 2094 was a proposed Virginia law that would have established requirements for businesses deploying "high-risk AI systems" — defined as AI that makes consequential decisions about Virginia consumers in domains including:

• Employment: Hiring, promotion, termination, compensation decisions
• Housing: Rental, purchase, and housing assistance decisions
• Credit and Finance: Lending, insurance underwriting, and financial product access
• Education: Admissions, financial aid, and academic evaluation
• Healthcare: Diagnosis, treatment, and medication recommendations
• Criminal Justice: Bail, parole, or sentencing decisions

The bill — formally the High-Risk Artificial Intelligence Developer and Deployer Act — was modeled on Colorado's SB 24-205 and would have required impact assessments, consumer notifications, rights to correct inaccurate data and appeal adverse decisions, and developer documentation obligations.

Why Was It Vetoed?

Governor Youngkin cited several concerns in his veto:

• The bill's burdensome, rigid framework could stifle AI innovation and economic growth in Virginia
• An especially onerous compliance burden on startups and smaller firms
• Existing laws already covering discrimination, privacy, and data use
• Virginia's own state-level approach — Executive Order 30 (2024) and the Virginia AI Task Force — as the preferred alternative

The veto was not overridden by the General Assembly.

What This Means for Virginia Businesses

There are no compliance obligations under HB 2094. Because it was vetoed, the bill never took effect — its planned civil penalties (up to $1,000 per violation, or $1,000 to $10,000 for willful violations) never became enforceable.

However, Virginia businesses deploying AI should still consider:

1. Colorado AI Act — if you serve Colorado consumers, the Colorado AI Act (effective January 1, 2027 under SB 26-189) applies regardless of where you're headquartered
2. Texas TRAIGA — if you serve Texas consumers, TRAIGA took effect January 1, 2026
3. EU AI Act — if you serve EU residents, the EU AI Act applies
4. Existing Virginia law — consumer protection, employment discrimination, and data privacy laws (including the VCDPA) may apply to AI systems in certain contexts

Will Virginia Try Again?

The veto does not preclude future AI legislation in Virginia. The trend toward state-level AI regulation continues, with Texas enacting TRAIGA in 2025 and Colorado's amended law taking effect in 2027. Virginia's 2026 General Assembly session considered several AI bills; the comprehensive proposals were tabled or carried over to the 2027 session.

Building compliance programs around the Colorado AI Act or NIST AI RMF now will position you well for any future Virginia requirements.

Resources

• Virginia HB 2094 regulation page
• Colorado AI Act compliance guide
• Texas TRAIGA regulation page
• Find AI governance consultants