Virginia HB 2154

• Authority: Virginia
• Parent authority: State governments
• Jurisdiction: United States
• Collections: U.S. state and local documents
• Most recent activity: Enacted
• Most recent activity date: 2021-03-18

Risk subdomain coverage

Minimal coverage — Brief mention but no specific mitigations, recommendations or governance measures relating to the risk subdomain are described.

• Compromise of privacy

All other risk subdomains had no coverage in this document.

Risk Coverage Summary

The document has minimal coverage of AI risk domains, with only subdomain 2.1 (Privacy compromise) receiving a coverage score above 1. The primary focus is on healthcare facility regulations with a brief requirement for HIPAA compliance when using intelligent personal assistants. The document does not substantively address AI-specific risks beyond basic privacy protection requirements.

Sector coverage

Good coverage — Comprehensive governance measures or mitigations with clear procedures relating to the sector are explicitly described.

• Health Care & Social Assistance

All other sectors had no coverage in this document.

Sectors Summary

The document exclusively governs the Health Care and Social Assistance sector, specifically regulating hospitals, nursing homes, and certified nursing facilities. The intelligent personal assistant provisions apply only within healthcare facility contexts.

Legislative Status

Hard Law

Legislative Status Summary

This is a binding state statute enacted by the Virginia General Assembly with mandatory language requiring hospitals and nursing facilities to establish policies for intelligent personal assistant access. The document uses mandatory language ('shall') and is part of the Virginia Code, making it legally enforceable.

Actors

Proposer

• Entity Types: AI_Governance_Actor
• Entities: Virginia General Assembly
• Summary: The document is a legislative act enacted by the Virginia General Assembly, as indicated by the enactment clause and approval date.

Target

• Entity Types: AI_Deployer
• Entities: hospitals; nursing homes; certified nursing facilities
• Summary: The regulation explicitly targets hospitals, nursing homes, and certified nursing facilities that deploy intelligent personal assistants for patient use, requiring them to establish policies for such deployment.

Enforcer

• Entity Types: AI_Governance_Actor
• Entities: Virginia Board of Health; Department of Health
• Summary: The Board of Health is responsible for promulgating regulations to carry out the provisions of this article, giving it enforcement authority over the requirements.

Monitor

• Entity Types: AI_Governance_Actor
• Entities: Virginia Board of Health
• Summary: The Board of Health has ongoing monitoring responsibilities through its regulatory authority over hospitals and nursing facilities, including the implementation of policies regarding intelligent personal assistants.

AI Lifecycle Stages

Lifecycle stages covered by the documents, as defined in the OECD Framework for the Classification of AI Systems

• Plan and Design
• Deploy
• Operate and Monitor

AI Lifecycle Summary

The document primarily addresses the Deploy and Operate and Monitor stages of the AI lifecycle. It requires healthcare facilities to establish policies for deploying intelligent personal assistants and ensuring ongoing compliance with privacy standards during operation.

Technical Scope

Terms relating to technical scope that are mentioned or implicitly referenced in the document

• AI Systems

Technical Scope Summary

The document explicitly defines and covers intelligent personal assistants, which are AI systems using natural language processing and artificial intelligence. It does not mention AI models, frontier AI, general purpose AI, foundation models, generative AI, predictive AI, open-weight models, or compute thresholds.