
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
299 articles by Johnie T Young
SEC 2027 Exam Priorities: What Changed for AI
The SEC's FY2027 exam priorities rename AI 'super intelligence' and add deepfake and phishing threats. What changed from FY2026 and what to fix.
Texas Sues OpenAI and Sam Altman: What the Suit Demands
Texas sued OpenAI and Sam Altman under its consumer protection law and the SCOPE Act. What the petition asks for, and who the SCOPE Act covers.
Ambriz v. Google: AI Call Recording Consent Checklist
Home Depot callers' wiretap claims over Google's Contact Center AI were dismissed. What saved Google, and a consent checklist for AI phone lines.
Florida Safe Screens Act: AI Chatbot Rules for Minors
Florida's attorney general wants chatbot age checks and a ban on companion features for minors, with $50,000 fines. What is proposed and what to check now.
Unauthorized AI Agents in Bank Accounts: Who Pays?
US banks are blocking AI agents that log in with customers' passwords. Chase's new terms and Regulation E put the loss on whoever shared the login. What to do.
ConnectWise Cloud Backup Breach: What to Check in M365
Microsoft tied the ConnectWise Cloud Backup (SkyKick) breach to Storm-0940 and an AI attack tool. The app IDs to find in Entra and what to check next.
Korea AI Washing Guidelines: KFTC Ad Checklist in English
Korea's KFTC published draft AI advertising guidelines with a self-check for AI claims. Our English translation, what each item means and how to comment.
LiteLLM 1.107.0 malware and Railway leak: keys to rotate
LiteLLM 1.107.0 shipped a credential stealer and Railway says env vars may have leaked. The AI keys to rotate, plus the PHP, GitLab and Chrome patches.
Meta Muse Privacy Leak: What to Do if Your Team Uses It
Did the Meta Muse privacy leak expose your team's chat titles? Shared links sat in public DNS records. See what Meta paused and what to do now.
MiraclePlus Sanctions: What US AI Teams Need to Check
MiraclePlus sanctions hit 5 entities under PAIPA, including Linwei Ding's Zhisuan. Check your investors, vendors and hires against the list.
DeepSeek Federal Ban: What Government Contractors Check Now
DeepSeek federal ban covers third-party products built on it. Check your SaaS, chatbots and model routers against FAR 52.204-30 before your next bid.
Meta Commercial Terms: The AI Crawl Clause and What to Do
Meta cut 'train' from its new Commercial Terms crawl clause, and both English editions now match. The UK CMA and German publishers want it stopped. What to do.