HB 2591

Abstract

Information and communications technology and services; transactions with foreign adversaries. Requires the Chief Information Officer (CIO) of the Virginia Information Technologies Agency to establish and maintain a list of prohibited information and communications technology and services that (i) are designed, developed, manufactured, or supplied by persons owned by, controlled by, or subject to the jurisdiction or direction of a foreign adversary and (ii) have been determined to pose an unacceptable risk to the national security of the United States or the security and safety of the United States. The bill specifies that the list shall include any information and communications technology and services determined by the U.S. Department of Commerce, the Federal Communications Commission, the U.S. Department of Homeland Security, or any other appropriate federal agency to pose an unacceptable risk to the national security of the United States or the security and safety of the United States pursuant to the provisions of Executive Order 13873 on Securing the Information and Communications Technology and Services Supply Chain and any related regulations or official guidance. The bill prohibits any public body or person conducting business in the Commonwealth from acquiring, importing, transferring, installing, dealing in, or using any information and communications technology and services included on the list established and maintained by the CIO unless (i) (a) such transaction was initiated, is pending, or will be completed after July 1, 2025, or (b) the public body received a waiver from the CIO and (ii) such transaction is not otherwise prohibited by law. The bill also allows the Superintendent of State Police, in consultation with the CIO, to grant an exception to the prohibition on such transactions by public bodies for the purpose of allowing any employee, agent, person, or entity to participate in any law-enforcement-related matters

A BILL to amend and reenact § 2.2-2006 of the Code of Virginia and to amend the Code of Virginia by adding a section numbered 2.2-2012.2, by adding in Chapter 55.3 of Title 2.2 a section numbered 2.2-5514.2, and by adding in Title 59.1 a chapter numbered 58, consisting of a section numbered 59.1-607, relating to information and communications technology and services; transactions with foreign adversaries.