Virginia moves ahead of Washington with sweeping AI and cybersecurity push

On October 23, 2026, Virginia Governor Abigail Spanberger signed Executive Directive 6, a new order aimed at shoring up the state’s defenses against risks created by rapidly advancing artificial intelligence. The directive instructs all executive-branch agencies to strengthen cybersecurity and tighten governance around how AI systems are procured, deployed and monitored.

The order calls for systematic risk assessments of AI tools used across state government, stricter controls on access to sensitive data, and better oversight of vendors and software supply chains. It also encourages deeper collaboration between state agencies, universities, and private-sector technology companies so that Virginia can both contain emerging threats and continue to benefit from AI-driven innovation.

Virginia hosts numerous federal facilities, defense contractors and data centers, making it a critical hub for AI development and cloud infrastructure. By moving ahead with state‑level rules while federal AI regulation remains unsettled, Virginia is positioning itself as an early laboratory for practical AI governance in the United States. The next phase will focus on translating the directive into concrete technical standards and sector‑specific guidelines that other states may eventually look to emulate.