TL;DR: On July 1, 2026, Virginia's facial recognition rules flip. Local police departments can use the technology, but only if they publish a policy, report every search annually, and follow hard limits on real-time tracking. Operators who abuse it face misdemeanor charges. It's not a ban, but it's not a free pass either.
Wait, I Thought Virginia Banned Facial Recognition?
Not exactly. In 2022, Virginia passed HB 1685 and HB 1089, creating a framework that initially blocked most local police use of facial recognition while State Police developed a model policy. The law gave agencies until July 1, 2026, to either adopt the State Police model or create their own that meets or exceeds those standards [1].
The "ban" was always a pause, not a prohibition. That pause ends July 1.
Who Can Use Facial Recognition After July 1?
Three categories of agencies:
- Virginia State Police: Already authorized. They wrote the model policy.
- Local police departments: Can use it starting July 1 if they publish a policy first. The policy must be posted publicly and updated annually [2].
- Campus police at public universities: Same rules as local police. Section 23.1-815.1 applies to them [3].
No agency can use facial recognition before publishing their policy. No policy, no searches.
What's Explicitly Banned
Virginia's law includes three hard prohibitions that survive the July 1 transition:
No Real-Time Tracking
Police cannot use facial recognition to "track the movements of an identified individual in a public space in real time" [2]. If they identify you, they can't follow you live through camera feeds.
No Live Video Databases
Agencies cannot "create a database of images using a live video feed for facial recognition technology purposes" [2]. They can query existing images. They can't build a rolling surveillance archive from live feeds.
No Commercial Database Enrollment
Police cannot upload images to commercial facial recognition databases like Clearview AI unless doing so is an "authorized use" under the model policy [2]. This limits the back-and-forth between cops and private surveillance companies.
The Reporting Requirements
Every year by April 1, police chiefs must publish a report on their facial recognition use from the previous calendar year. The report must include [2]:
- Complete history of every operator's queries
- Total number of searches conducted
- How many searches returned possible matches
- How many times those matches led to investigative leads
- How many cases were closed because of facial recognition
- Types of crimes being investigated
- The image database used (Clearview, state database, etc.)
- Demographic information for everyone searched
- Any third parties the data was shared with
That demographic data requirement matters. If Black residents are searched disproportionately, it'll show up in the annual reports. Whether anyone acts on that data is another question.
What Happens When Cops Break the Rules?
Virginia's law has teeth, some of them, anyway.
Any facial recognition operator who violates their agency's policy or conducts an unauthorized search commits a Class 3 misdemeanor. That's a fine of up to $500 [2]. Not exactly life-changing, but it's criminal, not just administrative.
First offense: misdemeanor conviction plus mandatory retraining before reinstatement.
Second offense: termination. The agency "shall terminate" the operator. Not "may." Shall [2].
The question is whether anyone gets caught. These penalties only work if violations are reported and prosecuted.
The Loopholes
Virginia's law is better than most states have, but it's not airtight:
Federal agencies aren't covered. ICE, FBI, ATF, DEA: they can use whatever facial recognition they want in Virginia. The state law doesn't bind federal actors.
"Authorized use" is flexible. Agencies can expand what counts as authorized by writing it into their policies. If the policy says facial recognition can be used for "public safety emergencies," that phrase can stretch.
No warrant requirement. Police need a policy. They don't need a warrant. The Fourth Amendment question remains untested.
Commercial partnerships persist. The law restricts uploading images to commercial databases, but it doesn't restrict querying them. If Clearview AI already has your face, Virginia cops can still search it.
Why This Matters Now
Virginia's July 1 transition comes as facial recognition accuracy problems keep making headlines. In March 2026, a Tennessee grandmother spent five months in a North Dakota jail after Fargo police arrested her based on a facial recognition match. She'd never been to North Dakota. Her bank records proved she was 1,200 miles away when the crime happened [4].
Meanwhile, Essex Police in the UK just paused their facial recognition program after a Cambridge study found the system was significantly more likely to correctly identify Black participants than other groups, a bias pattern that creates different error rates for different populations [5].
Virginia's law requires demographic reporting precisely because these biases exist. But reporting bias and fixing bias are different things.
What You Can Do
Find Your Agency's Policy
After July 1, check your local police department's website for their facial recognition policy. If they're using the tech without a published policy, they're violating state law.
Request the Annual Report
Every April, agencies must publish their facial recognition usage report. If your local PD doesn't post it, file a FOIA request. The law requires disclosure.
Document Surveillance Equipment
Keep track of cameras in your area. If police start deploying new surveillance infrastructure, you'll want baseline documentation of what existed before July 1.
Know Your Limits
Virginia's law restricts real-time tracking and live video databases. If you see evidence of those uses, that's a potential violation worth reporting to oversight bodies and civil liberties groups like the ACLU of Virginia. For personal countermeasures, see our guide on how to beat facial recognition.
Key Dates
- 2022: Virginia passes HB 1685 and HB 1089, creating facial recognition framework
- July 1, 2026: Local police can begin using facial recognition with published policies
- April 1, 2027: First annual reports due from agencies that used facial recognition in 2026
References
- National Law Review - Virginia Law Bans Local Police Use of Facial Recognition Technology (March 2022)
- Code of Virginia § 15.2-1723.2 (Effective July 1, 2026) - Facial recognition technology; approval
- Code of Virginia § 23.1-815.1 (Effective July 1, 2026) - Campus police facial recognition technology
- MPR News - Fargo police's use of AI raises questions after suspect says facial recognition failed (March 18, 2026)
- Computer Weekly - Essex Police halts live facial recognition over bias and accuracy risks (March 2026)