Virginia Commission Identified Gaps in AI Oversight

The Joint Legislative Audit and Review Commission found the state IT agency lacks adequate AI governance and usage policies.

Updated on Oct. 13, 2026 in Artificial Intelligence

Isometric editorial illustration showing a monolithic stone plinth supporting a stack of interconnected steel-frame cubes, representing governmental policy structures.
Virginia’s Joint Legislative Audit and Review Commission report highlights critical gaps in the state’s artificial intelligence governance and oversight policies. AI Illustration. Upload story photo >

Live Poll

Should your state government be more aggressive in regulating the use of artificial intelligence tools?

A new report from Virginia's Joint Legislative Audit and Review Commission concludes that the state Information Technology Agency has failed to provide sufficient oversight for artificial intelligence tools. Findings indicate the agency has not kept its AI standards current and that the executive branch currently lacks a formal acceptable use policy.

Why it matters

The report warns that the current regulatory vacuum regarding artificial intelligence creates significant operational risk for state government. By failing to establish clear employee guidelines, Virginia faces challenges in managing the safety and compliance of rapidly evolving AI deployments.

The commission assessment highlighted systemic failures, specifically that the Information Technology Agency has not updated AI standards frequently enough to match current technology. While the Chief Information Officer agrees with these findings, the state currently lacks any acceptable use policy.

The players

Joint Legislative Audit and Review Commission

The agency responsible for conducting performance audits and oversight of Virginia state government programs.

Information Technology Agency

The entity tasked with managing executive branch technology policy and information security standards.

Division of Legislative Services

The legislative support agency responsible for drafting bills and providing legal research to the General Assembly.

The details

The commission reviewed how the Information Technology Agency manages executive branch AI governance and evaluated the state's legislative drafting process. The audit found that current agency requirements undermine effective oversight, necessitating a new approach to evaluate AI tool risks. Additionally, the Division of Legislative Services currently lacks an attorney specializing in technology law, which the report cites as a bottleneck for modern legislative drafting.

Timeline

  1. October 13, 2026: The report findings were presented to the commission.

The Tech Race

This audit marks a significant shift in how the state evaluates its internal governance relative to the rapid proliferation of generative tools. It follows a pattern of state-level scrutiny aimed at closing the gap between existing bureaucratic frameworks and the capabilities of modern AI.

The proposed changes affect state employees through the development of a forthcoming acceptable use policy for AI tools. These updates will eventually establish mandatory standards for how departments across Virginia integrate and manage software risks within their daily operations.

The takeaway

Virginia is now moving to address its oversight deficit by creating a dedicated technology law position within the legislative branch. Residents and stakeholders should monitor the General Assembly for upcoming budget allocations to fund these new legal and governance roles.

Further reading

For broader trends in governance, visit the Artificial Intelligence section.

Source note: This article includes information reported by 8News.

Live Poll

Should your state government be more aggressive in regulating the use of artificial intelligence tools?