Virginia Code § 2.2-5514: prohibited products and cyber incident reporting

AI-use reference. Current codified section. Applies to: Public bodies expressly include cities, city councils, school boards, public universities and advisory bodies; applies directly to Newport News within statutory terms. Requirements or purpose: No public body may use hardware, software or services DHS prohibits on federal systems, including through work for another public body. Qualifying cybersecurity incidents must be reported to Virginia Fusion Intelligence Center within24 hours of discovery. Limits: Not all AI software is prohibited, and not every technical error is a reportable incident. SubsectionC defines incident thresholds. SubsectionD protects cybersecurity information in VITA possession; it is not a blanket secrecy rule for every local AI document.