Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
295 articles by Johnie T Young
news·5 min
Read →FTC Says Colorado's AI Bias Law May Be Preempted. Comment by July 31.
FTC's July 1 statement claims Colorado's AI Act conflicts with federal law. Public comment closes July 31. What this means for teams already complying.
ftcstate-ai-lawpreemptioncolorado
news·5 min
Read →Starbuck v. Google: AI Defamation Survives Dismissal, Heads to Trial
Google must defend Robby Starbuck's AI defamation suit. Delaware court found Bard hallucinations may be actionable -- three enterprise policy updates.
ai-liabilitylegalenterprise-riskai-governance
Guides·9 min
Read →ISO 42001 vs EU AI Act vs NIST AI RMF: which framework applies to your team in 2026
Which AI governance framework fits your team in 2026? Compare ISO 42001, EU AI Act, and NIST AI RMF on cost, legal obligation, and certification.
iso-42001eu-ai-actnist-ai-rmfframeworks
news·5 min
Read →CNIL's Agentic AI Note: Three GDPR Risks Your Team Needs to Address
France's CNIL and CIANum flagged persistent memory, multi-service data flows, and accountability gaps as the three key GDPR risks in agentic AI.
gdprdata-protectionai-agentsprivacy
news·5 min
Read →OpenAI, Google, Anthropic Hold 84% of AI Agents. France Noticed.
France's competition authority found three companies control 84% of AI agents. Opinion 26-A-05 explains what enterprise vendor lock-in looks like now.
antitrustvendor-riskai-governanceprocurement
Guides·11 min
Read →EU AI Act Article 9 risk management system: step-by-step implementation guide
What does an EU AI Act Article 9 risk management system need? 4 elements, run continuously, documented in a format auditors can inspect.
eu-ai-actrisk-managementhigh-risk-aicompliance
Guides·9 min
Read →OpenAI API governance and data privacy for developers 2026
The OpenAI API has meaningfully different data handling than ChatGPT. API inputs are not used for training by default, zero data retention is available, and a DPA is accessible without an enterprise contract. Here is what that means for your team's governance.
openaiapidevelopersgdpr
Guides·10 min
Read →ChatGPT vs Claude vs Gemini enterprise compliance 2026: the complete comparison
Compare ChatGPT vs Claude vs Gemini enterprise compliance across 3 tiers: training policies, DPA availability, EU data residency, and which plan you need.
chatgptclaudegeminicomparison
Guides·10 min
Read →Zoom AI Companion vs Otter.ai vs Fireflies: privacy and compliance comparison 2026
Zoom AI Companion, Otter.ai, and Fireflies.ai handle your meeting data very differently. This comparison covers data training policies, DPA availability, GDPR status, consent mechanics, and the shadow AI bot problem your team may not know about.
zoomotter-aifirefliesmeeting-transcription
Guides·10 min
Read →AI Agent Workforce Policy: Template for HR Teams Managing Automation
When AI agents start replacing roles, you need a written policy first. Template covering displacement notice, human oversight, and appeals.
ai-governancehr-complianceworkforcetemplates
Guides·9 min
Read →Microsoft Copilot data governance for small teams: what you actually need to know in 2026
Microsoft Copilot raises governance questions that Microsoft's own documentation glosses over. This guide covers data training policies, EU residency gaps, DPA status, and the SharePoint access risk that affects every M365 team.
microsoft-copilotdata-governancemicrosoft-365compliance
guides·5 min
Read →Grok Build: 8,700 Stars in 48 Hours. 5 Questions Before Devs Install.
xAI's Grok Build went viral July 14 with 8,700 GitHub stars. Free-tier sends your code to xAI for training. 5 questions to answer before approving it.
ai-securityvendor-riskcomplianceai-governance