Public Records

Section XXII terms filed December 9, 2025 and effective January 1, 2026. Paragraph D.1 requires payment of specified extension costs above four times continuing estimated annual revenue, excluding fuel revenue, for the described new nonresidential/three-phase service. Actual applicability depends on facilities, customer category, costs and agreements. This general rule is not the unrecovered direct-connect proposal in PUR-2026-00131 or proof of a data-center subsidy.

AI-use reference. Effective June 23, 2025; general compliance deadline April 22, 2026, with specified safe-harbor exceptions. Applies to: Entities subject to the COPPA Rule. Requirements or purpose: The final amendment supplies operative dates and explanations for the revised notice, consent, security, retention and personal-information provisions. Limits: General2026 compliance date excludes specified 312.11 safe-harbor provisions with their own dates. Proposed special school-edtech amendments were not all adopted; read the final rule.

AI-use reference. Released January 29, 2025; report under existing copyright law. Applies to: Authorship and protection of works made with generative AI. Requirements or purpose: The report distinguishes protectable human expression, selection and modification from purely machine-generated material. Prompts alone generally do not provide sufficient expressive control in the technologies analyzed. Limits: The report is explanatory analysis, not a new statute or a blanket prohibition on AI-assisted work. Human contribution is assessed case by case.

AI-use reference. May 9, 2025 pre-publication version remains identified as such on official AI page checked October 26, 2026. Applies to: Legal analysis of training data, retrieval, outputs, fair use and licensing. Requirements or purpose: The report examines how existing exclusive rights and fair use apply to data acquisition, model development and deployment. Review data provenance and licenses for the actual use. Limits: This version is not a final regulation, court holding or categorical authorization of all training. Disputed infringement and fair-use questions remain use specific.

AI-use reference. Effective March 16, 2023; linked from current official AI page. Applies to: Applicants seeking copyright registration of works containing AI-generated content. Requirements or purpose: Identify the human contribution and disclose AI-generated material as the policy directs; exclude material that lacks human authorship from the copyright claim. Limits: Registration policy is distinct from a municipal AI-use approval requirement and does not resolve infringement in model training.

AI-use reference. EffectiveDecember10 2025. Applies to: DOJ Title VI regulations and covered DOJ-assisted programs; not an amendment to every agency's regulations or to other civil-rights statutes. Requirements or purpose: Removes DOJ regulatory disparate-impact liability provisions and aligns DOJ's regulation with its stated intentional-discrimination interpretation of Title VI. Limits: Do not generalize this into a repeal of federal antidiscrimination law, Title VII's statutory disparate-impact provision or the Fair Housing Act. Other federal funding agencies and judicial precedent require separate scope analysis.

AI-use reference. Live official guidance. Applies to: State/local government employers using hiring or other employment technology; ADA coverage and individual circumstances determine duties. Requirements or purpose: Avoid unlawful disability screening; evaluate technologies for job-related assessment; provide reasonable accommodations absent undue hardship; avoid prohibited medical/disability inquiries. Employer remains responsible when another company supplies the tool. Limits: The guidance expressly has no force/effect of law and creates no additional duties. Its ADA citations are the legal anchors; not a mandatory universal AI audit or disclosure statute.

AI-use reference. AdoptedJune4 2026; replaces FY 2024–2028 Strategic Enforcement Plan. Applies to: EEOC's work and enforcement priorities; shared public-employer jurisdiction with DOJ. Requirements or purpose: Guides prevention, voluntary resolution and litigation priorities; emphasizes intentional discrimination and merit-based evenhanded enforcement. Limits: The plan is not a city AI-use license or repeal of Title VII/ADA. Include as current-status context so earlier AI/algorithmic-enforcement priorities are not mislabeled current.

AI-use reference. Current published version6.1, June 25 2026;473 pages. Applies to: Individuals/agencies/contractors/private entities accessing CJI or supporting covered services and infrastructure. City police or a city-hosted AI system handling CJI could fall within scope. Requirements or purpose: Protect CJI throughout lifecycle; authorized use/dissemination, access controls, agreements, personnel/security controls, audit logging, encryption and incident response as specified. External AI processing must fit authorized access/security arrangements. Limits: Not an AI-specific approval or certification and not a blanket ban on AI. Do not upload CJI to a service merely because vendor claims security. Determine actual CJI, interfaces, state CSA requirements and applicable agreements. Latest policy is 6.1, not frequently indexed 5.9.1.

AI-use reference. Current official source checked October 26, 2026. Applies to: Employers using qualifying third-party consumer reports for hiring, retention, promotion or reassignment. Requirements or purpose: Provide the required separate written notice and obtain permission before the report; follow pre-adverse and adverse-action procedures, including report and rights information as required. Limits: AI scoring does not by itself establish FCRA coverage: the source, report and purpose matter. Guidance explains existing law and does not authorize hiring AI that City policy 1404 prohibits.

AI-use reference. Current official guidance. Applies to: Covered entities/business associates and separate cloud providers maintaining or processing ePHI on their behalf. Requirements or purpose: Appropriate BAA, risk analysis/risk management, safeguards, permitted uses and incident/breach responsibilities. Provider maintaining encrypted ePHI can still be a business associate even without the decryption key. Limits: Not a general ban on cloud/AI or a statement all vendors are HIPAA-covered. Application depends on actual PHI relationship and permitted purpose; customer/provider control allocation matters.

AI-use reference. 2024 digital-platform advertising guidance WITHDRAWN; label historical. Applies to: HUD/stakeholders formerly relying on Guidance on Application of FHA to Advertising of Housing, Credit, and Other Real Estate-Related Transactions through Digital Platforms (Apr 29 2024). Requirements or purpose: Notice says listed documents have been removed from active use and must not be relied on as authoritative; underlying Fair Housing Act rights/enforcement continue. Limits: This notice lists digital advertising guidance, NOT the distinct 2024 tenant-screening guidance. Do not infer both withdrawn from this document. Use final Federal Register original; prepublicationPDF p 3 contains clear title table.

AI-use reference. Current official guidance checked October 26, 2026. Applies to: Virginia state and local public bodies conducting public business with AI. Requirements or purpose: AI-created records and business interactions with chat tools must be managed under the applicable records series and retention schedule. Preserve usable content and context, including records held through vendors. Limits: Retention depends on function and content. This is not a requirement to keep every prompt forever or disclose protected data.

AI-use reference. Published and listed by current administrative-policy index, with the index's currency limitation. Applies to: Official City/department social-media sites and employees authorized to speak for the City on those sites, including AI-assisted content within that activity. Requirements or purpose: Department Director and Communications Office approval of official sites; administration by Communications or designated personnel. Comply with applicable law, IT policy, FOIA and records retention; preserve removed unsuitable content with removal reasons under the applicable schedule. Do not post nonpublic, sensitive, personal or confidential information; follow copyright and other laws; correct mistakes transparently; published claims must be substantiated and approved. Limits: Not AI-specific and not authorization to deploy a chatbot. Its public-comment moderation provisions remain subject to applicable constitutional law; this record does not assess any particular moderation action.

AI-use reference. Current RMF 1.0 resources remain published; NIST says revision is underway. Applies to: Organizations of any sector/size designing, developing, deploying or using AI, including cities voluntarily. Requirements or purpose: Organize governance around Govern, Map, Measure and Manage; assess validity, safety, security/resilience, explainability, privacy, accountability and harmful bias throughout AI lifecycle. Limits: NIST explicitly says voluntary. A separate law, contract or adopted policy can incorporate particular requirements; the framework alone does not compel Newport News to adopt it or establish compliance.

AI-use reference. Published; NIST says update will follow RMF revision. Applies to: Organizations implementing AI RMF, optionally including cities. Requirements or purpose: Offers suggested actions, documentation and references for Govern, Map, Measure and Manage, which organizations can tailor to actual use cases. Limits: NIST expressly allows borrowing as many or as few suggestions as appropriate. Not an audit pass/fail standard or city law.

AI-use reference. Published companion to AI RMF 1.0; remains available. Applies to: Organizations using/developing generative AI; city use is voluntary unless incorporated elsewhere. Requirements or purpose: Adds generative-AI-specific risks and suggested controls, including confabulation, privacy, information integrity/security, intellectual property and human-AI configuration, to the RMF lifecycle. Limits: Not legislation, product certification or automatic municipal mandate. Publication history under now-revoked EO 14110 does not itself withdraw this currently published NIST resource.

AI-use reference. Attached to March 17, 2026 work-session Information, Discussion item 2.01; official converted presentation resolves internal document 4413. Applies to: NNPS enterprise/instructional AI governance architecture and vendor controls. Requirements or purpose: Describes layered governance, tool vetting, vendor model-training opt-outs, encryption, network blocking, logging, SSO, PII sanitization, vendor retention controls and staff/student training. References NIST AI RMF and CISA K-12 guidance as governance resources. Limits: These are presenter-described controls, not independently verified deployment facts or contractual guarantees. The historical slide 5 PK7/8 versus high-school split differs from current handbook PK7 versus grades 8–12; use current handbook for school-year rules. No adoption inferred.