
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
300 articles by Johnie T Young
Agentic AI Vendor Contracts: The 8 Clauses You Need in 2026
8 agentic AI vendor contract clauses you need for 2026: action boundaries, audit trails, and liability terms standard SaaS contracts miss.
California ADMT for Employers: Notice and Risk Templates
California ADMT compliance for employers: do your AI hiring tools need a pre-use notice by Jan 1, 2027? Copy notice, opt-out and risk assessment templates.
Anthropic Export Ban: What It Means for AI Vendor Policy
13-point vendor dependency checklist: is your team exposed if Anthropic cuts Claude access again? Includes a 5-step AI contingency plan.
AI Incident Response Plan: What Regulators Expect
What should your AI incident response plan cover in 2026? EU AI Act Article 73 gives 15 days to notify regulators, GDPR Article 33 gives 72 hours.
US State AI Law Tracker: In Force, Pending or Repealed
7 US state AI laws are in force right now, Colorado's just repealed. See which are pending, active, or dead, updated monthly in this tracker.
EU AI Act Annex III Compliance Roadmap for December 2027
EU AI Act Annex III compliance checklist: deadline moved to December 2, 2027. Inventory, classify, document, assess, and monitor high-risk AI now.
Connecticut Data Privacy Law Now Covers More Small Teams
Connecticut cuts its privacy law threshold to 35,000 consumers on July 1, 2026, plus two new no-threshold triggers. Does your team now qualify?
Does Your AI Vendor Train on Your Data? 7 Vendors Compared
Which AI tools train on your business data in 2026: ChatGPT, Claude, Gemini, Copilot, GitHub, Atlassian and Notion by plan, with the opt-out for each.
Russia's Project 2026 and AI Training Data Poisoning Risk
6 vendor risk checklist questions for small teams after Russia's SDA leaked plans to poison AI training data at scale. Bloomberg's June 2026 report.
GPT-5.6 Stagger: 5 AI Procurement Policy Updates
5 AI procurement policy updates compliance teams need now that the White House forced OpenAI to stagger GPT-5.6 access. Are yours in place?
AI Compliance Checklist by Team Size: 1-10, 11-50, 51-200
Need an AI compliance checklist by team size? Use 3 tiers (1-10, 11-50, 51-200) with clear triggers for when to add vendor and incident response steps.
GDPR AI Fines 2026: Enforcement Cases for Small Teams
GDPR AI fines 2026: 7.1 billion euros and counting. Five enforcement cases explain why your vendor DPA will not shield small teams from risk.