TRENDING
Close-up of an iridescent teal duck feather with a brown edge against a blurred green background
November 13, 2026
Apache Patches a Critical mod_http2 RCE Found Independently by Anthropic’s Scanner and Google Researchers, but 2.4.70 Shipped Nearly Five Days Earlier Without the Fix and the One-Line Patch Was Public for About 58 Hours Before the Advisory
An open Pacific oyster shell resting on a wooden chopping board
November 13, 2026
CNCF’s OpenShell-on-Kubernetes Guide Turns Agent Sandboxing Into a Two-Layer Split, but the Demo’s Seven Kyverno Policies Admit Secret Volumes, Oversized Init Containers and Unconfined Seccomp, and the OpenShell Release It Describes Is Five Behind the Current One
Close-up of the white locking bars and cam handles on the closed doors of a grey intermodal shipping container
November 13, 2026
Red Hat Published Eight Fixed Quay Releases Within Two Hours of Its CVSS 9.8 Signing-Key Advisory, but the CVE Page Still Lists No Fix, and the Sibling 9.9 Flaw’s Page Names Those Releases While None of Their Advisories Lists It
A white life ring hanging on a wooden post above an empty sandy beach and calm blue water, a rescue tool kept within reach before anyone needs it
November 13, 2026
How to Recover Lost Commits and Files in Git With reflog and fsck, and Snapshot Uncommitted Work Before a Script or AI Agent Can Wipe It
Three meerkats standing upright on a red sand mound at dusk, each looking in a slightly different direction
November 13, 2026
Cloudflare’s QuePaxa Post Turns Leader Elections Into a Hedging Delay, but in a Simulation of the Paper’s Protocol a Five-Millisecond Hedge Costs Every Slot Its Fast Path, and the 2020 Outage It Cites Lasted Six Hours Because Database Replicas Had to Be Rebuilt
13 Nov 2026
SXZ.io SXZ.io
  • Home
Search the Site
Popular Searches:
Technology Amazon AI
Recent Posts
A hazel dormouse climbing among green leaves and orange berries, a visual pun on dormant neurons
Microsoft’s Lazarus Post Turns “Fewer Than 10 Dormant Neurons” Into an Agent Backdoor, but the Paper Measured a Harmless Marker, Qwen Reached 51% on the Same 23 Samples, and the 91.4% Detector Was Scored on 35 Edited Checkpoints From the Attack’s Own Family
November 13, 2026
A coal miner’s hard hat with an electric headlamp resting on a dark cloth
Attackers Put Miners on 21 N-central Servers Within Nine Hours of a Public Exploit, 19 of Them on the Hotfix 2 Build, and Apache Does Not Expect to Release a Fixed Axis 1 for the Flaw That Starts the Chain
November 13, 2026
Concrete dam wall with a footbridge along its crest holding back a calm reservoir below tree-covered hills, with a few people standing at the near end of the walkway
How to Shut Down a FastAPI Service Without Dropping Requests: Handle the Stop Signal, Drain Before You Close, and Survive a Rolling Restart Behind nginx
November 12, 2026
SXZ.io SXZ.io
  • Home

Categories

Articles 297 Posts
News 302 Posts
Learning Hub 268 Posts
Home/News/Virginia’s Governor Signs an Executive Order to Rein In Data Centers and Launch an AI Task Force
News

Virginia’s Governor Signs an Executive Order to Rein In Data Centers and Launch an AI Task Force

Governor Abigail Spanberger signed Executive Order 22 in Richmond, banning NDAs for state data center deals and ordering a DEQ review of noise and water impacts, while the bigger fight over ending...

September 18, 2026 6 Min Read
60

Virginia Governor Abigail Spanberger signed Executive Order 22 on Friday at a news conference in Richmond, rolling out what her office calls a “Data Center Accountability Framework” and creating a new state AI Task Force. The order bans Virginia’s executive branch from signing non-disclosure agreements with data center developers, directs the state’s environmental regulator to study noise, water, and backup-generator impacts within 180 days, and lays the groundwork for a far bigger fight over data center zoning that will not be settled until the General Assembly meets in 2027.

Table Of Content

  • What Executive Order 22 Actually Does Today
  • The Bigger Ask Waits for the Legislature
  • An AI Task Force With a Broad Mandate
  • A Fight That Started Months Before Friday
  • Virginia Isn’t Alone, and the Federal Government Is Moving the Other Way

“In the years before I took office, data centers came to Virginia and the Commonwealth did not have a clear or coordinated plan to address their impacts on Virginians: their electric bills, their water, their land, their air, or their quality of life,” Spanberger said, according to a release from her office republished in full by WDBJ7. “That changes today.”

What Executive Order 22 Actually Does Today

Stripped of the framing, the order itself is narrower than its “most comprehensive and aggressive data center accountability effort in the country” billing suggests. According to Virginia Business, most of what Spanberger announced Friday will need to pass the General Assembly before it takes effect, and the majority of the framework’s provisions will only apply to future projects rather than the data centers already operating or already approved across the state.

What the order does put into motion immediately is narrower and mostly procedural. It bars executive branch agencies, departments, boards, commissions, authorities, and employees under the governor’s supervision from entering non-disclosure agreements tied to future data center projects, a restriction that does not extend to local governments or to NDAs already signed. It also directs the Department of Environmental Quality to deliver findings within 180 days on an accelerated timeline for noise protections, an analysis (conducted with the state health and energy departments) of diesel and other backup-generator fuel use, criteria for identifying “cooling water scarcity areas,” and site guidance for future data center development that limits impacts on energy, water, land, and infrastructure.

The Bigger Ask Waits for the Legislature

The headline-grabbing piece, ending “by-right” approval, the zoning shortcut that has let developers build data centers on office-zoned land without a rezoning hearing or public vote, is not something an executive order can do on its own. Virginia Business reports that Executive Order 22 directs the administration to propose legislation for the 2027 General Assembly session that would eliminate by-right approval statewide and require local approval for any data center drawing more than 25 megawatts of power. Until lawmakers act, the practice Spanberger is campaigning against stays legal.

The rest of the framework reads the same way: a list of goals the administration wants written into law rather than commitments already in force. Those goals include ending state subsidies for data centers in Virginia’s site development programs, removing large future projects from the state’s fast-track permitting process, requiring utilities to shift a larger share of transmission and generation costs onto data centers and other big electricity users, requiring stronger upfront financial commitments from developers to discourage speculative land-banking, and capping how much electricity data centers can generate on-site from natural gas.

Spanberger was direct about the order’s limits at Friday’s news conference. “This is not a temporary fix,” she said, per Virginia Business. “We are not scrambling to figure out what to do tomorrow. We are creating a new way forward for how this industry does business in the economy. And make no mistake about it: These standards are high. And moving forward, it’s pretty simple. If you don’t want to meet these high standards, Virginia may not be the place for you.”

An AI Task Force With a Broad Mandate

Executive Order 22 also creates a new state AI Task Force, to be led by the state’s chief transformation officer, counsel to the governor, and the secretary of administration. It is not Virginia’s first: former Governor Glenn Youngkin stood up an AI Task Force of outside experts under his own Executive Order 30 in January 2024, an advisory body focused on responsible adoption rather than the risk-mitigation mandate Spanberger’s version carries. Its brief covers workforce displacement, data privacy, and cybersecurity risk, and it is charged with engaging technology companies directly to “address the risks, mitigations and people-first design requirements” of AI systems deployed in the state, according to the governor’s office language quoted by WDBJ7.

Spanberger framed the task force as a hedge against federal inaction rather than a substitute for it. “We simply aren’t sure the federal government is going to act on this, though it is my hope that they will move forward with new progress as soon as possible,” she said, per Virginia Business.

A Fight That Started Months Before Friday

Friday’s order did not arrive in a vacuum. In late June, Spanberger and House negotiators struck a compromise with Senate Democrats on a data center power-usage tax that Virginia Business reported would raise $600 million a year over the next two years, after senators pushed unsuccessfully for a full repeal of a separate sales-and-use tax exemption for data centers, one that costs the state more than $1 billion a year in lost revenue, per Virginia Business, and that the state’s own tax department has put at $1.9 billion in aggregate 2025 benefits.

That history shaped Friday’s reaction on both sides. The Senate Democratic Caucus called the order a welcome recognition of “the significance of establishing appropriate policies to govern its growth and impact on our commonwealth,” per Virginia Business, while Senate President Pro Tempore Louise Lucas, who led the push for a full repeal of the exemption and called Spanberger the “data center diva” in a social media quip this summer, was blunter: “The governor is finally feeling the heat but still ignoring the fire,” Lucas said in a statement. “Her proposal does not end the $2 billion in sales tax exemptions provided to data centers.”

The industry’s own trade group struck a more conciliatory note while pushing back on the underlying premise. Nicole Riley, director of Virginia government affairs for the Data Center Coalition, said in a statement that the group shares “Gov. Spanberger’s goals of ensuring that Virginia can compete for the significant economic opportunities presented by responsible data center development while protecting the interests of residents, communities and ratepayers.” Riley added that Virginia’s electric rates sit below the national average and that, citing the state’s Joint Legislative Audit and Review Commission, data center water usage amounts to about 0.5 percent of statewide withdrawals.

Environmental advocates who have pushed for tougher action were less satisfied. Piedmont Environment Council president Chris Miller told The Verge that the order “largely addresses standards on new data centers and does not deal with what’s already built and in the pipeline, along with the ongoing impacts piling up in communities now.” That gap matters in Virginia specifically: Loudoun County alone hosts roughly 250 data centers built under the same by-right zoning classification Spanberger is now trying to unwind statewide, a two-decade buildout sxz.io covered in depth in early September.

Virginia Isn’t Alone, and the Federal Government Is Moving the Other Way

Spanberger’s order landed the same day California Governor Gavin Newsom signed his own executive order convening experts on AI safety, and it follows earlier executive actions by New York Governor Kathy Hochul and Texas Governor Greg Abbott aimed at slowing data center growth in their states, The Verge reported. Virginia’s move also arrives two weeks after Thailand’s government froze 166 pending data center projects nationwide and three weeks after the UK’s Green Party pushed to strip data centers of automatic critical-infrastructure status in Parliament, both moves sxz.io has tracked as part of the same pattern.

The state-level pushback also cuts against the direction federal policy has taken. A group of former EPA officials warned earlier this month that a wave of federal environmental rollbacks tied to the AI data center buildout could raise pollution-related deaths nationally, even as the Trump administration has pursued a deregulatory approach to data center permitting. Virginia’s own framework does not go as far as a moratorium, the option some of its localities have already chosen. What it does is put the state on record, formally, that the terms data center developers have operated under for two decades are no longer the terms Richmond intends to offer going forward, with the details still to be negotiated once the General Assembly convenes for its 2027 session.

Tags:

AI GovernanceArtificial IntelligenceData Center RegulationData CentersVirginia

Share

A real strangler fig's braided, moss-covered aerial roots fused around and enveloping its host tree in a Queensland rainforest
Previous Post

How to Build a Strangler Fig Facade in Python to Safely Cut Over From Legacy Code

A US National Geodetic Survey reference marker set in the ground, an immutable physical reference point
Next Post

How to Pin and Verify GitHub Actions to Stop Supply Chain Poisoning

No Comment! Be the first one.

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Latest
13 Nov
Microsoft’s Lazarus Post Turns “Fewer Than 10 Dormant Neurons” Into an Agent Backdoor, but the Paper Measured a Harmless Marker, Qwen Reached 51% on the Same 23 Samples, and the 91.4% Detector Was Scored on 35 Edited Checkpoints From the Attack’s Own Family
13 Nov
Attackers Put Miners on 21 N-central Servers Within Nine Hours of a Public Exploit, 19 of Them on the Hotfix 2 Build, and Apache Does Not Expect to Release a Fixed Axis 1 for the Flaw That Starts the Chain
Trending
November 13, 2026
Microsoft’s Lazarus Post Turns “Fewer Than 10 Dormant Neurons” Into an Agent Backdoor, but the Paper Measured a Harmless Marker, Qwen Reached 51% on the Same 23 Samples, and the 91.4% Detector Was Scored on 35 Edited Checkpoints From the Attack’s Own Family
November 13, 2026
Attackers Put Miners on 21 N-central Servers Within Nine Hours of a Public Exploit, 19 of Them on the Hotfix 2 Build, and Apache Does Not Expect to Release a Fixed Axis 1 for the Flaw That Starts the Chain
November 12, 2026
How to Shut Down a FastAPI Service Without Dropping Requests: Handle the Stop Signal, Drain Before You Close, and Survive a Rolling Restart Behind nginx
November 12, 2026
Apache Patches a Critical mod_http2 RCE Found Independently by Anthropic’s Scanner and Google Researchers, but 2.4.70 Shipped Nearly Five Days Earlier Without the Fix and the One-Line Patch Was Public for About 58 Hours Before the Advisory
November 12, 2026
CNCF’s OpenShell-on-Kubernetes Guide Turns Agent Sandboxing Into a Two-Layer Split, but the Demo’s Seven Kyverno Policies Admit Secret Volumes, Oversized Init Containers and Unconfined Seccomp, and the OpenShell Release It Describes Is Five Behind the Current One
November 12, 2026
Red Hat Published Eight Fixed Quay Releases Within Two Hours of Its CVSS 9.8 Signing-Key Advisory, but the CVE Page Still Lists No Fix, and the Sibling 9.9 Flaw’s Page Names Those Releases While None of Their Advisories Lists It

Related Posts

Rows of server racks in a data center representing network infrastructure targeted by botnets
News

C0XMO Botnet Shows Why Old Router Firmware Still Matters

June 7, 2026
Close-up of a USB flash drive, representing physical data-theft risk in office security incidents
News

Fake IT Support Is Now Walking Through the Front Door

June 7, 2026
A phone security app on a smartphone resting on a laptop keyboard.
News

Everest Forms Pro Flaw Is Being Exploited to Create Rogue WordPress Admins

June 7, 2026
A phone secured by a padlock, illustrating AI data-leak containment and security controls.
News

OpenAI’s Lockdown Mode Is a Data-Leak Brake, Not a Prompt-Injection Cure

June 8, 2026
SXZ.io SXZ.io
  • [email protected]

Categories

Articles
Learning Hub
News

All Rights Reserved by SXZ.io ©2026