Skip to main content
0 days

Colorado ADMT rules: hearing and last day for written comments · Oct 26, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Guides·9 min
Read →

Agentic AI Vendor Contracts: The 8 Clauses You Need in 2026

8 agentic AI vendor contract clauses you need for 2026: action boundaries, audit trails, and liability terms standard SaaS contracts miss.

agentic-aivendor-contractscompliancelegal
Governance·13 min
Read →

California ADMT for Employers: Notice and Risk Templates

California ADMT compliance for employers: do your AI hiring tools need a pre-use notice by Jan 1, 2027? Copy notice, opt-out and risk assessment templates.

hr-aicaliforniaadmthiring
news·5 min
Read →

Anthropic Export Ban: What It Means for AI Vendor Policy

13-point vendor dependency checklist: is your team exposed if Anthropic cuts Claude access again? Includes a 5-step AI contingency plan.

ai-vendor-riskanthropicexport-controlsfrontier-ai
Guides·9 min
Read →

AI Incident Response Plan: What Regulators Expect

What should your AI incident response plan cover in 2026? EU AI Act Article 73 gives 15 days to notify regulators, GDPR Article 33 gives 72 hours.

ai-governanceincident-responsecomplianceeu-ai-act
news·5 min
Read →

US State AI Law Tracker: In Force, Pending or Repealed

7 US state AI laws are in force right now, Colorado's just repealed. See which are pending, active, or dead, updated monthly in this tracker.

state-ai-lawcompliancemulti-statetracker
Guides·9 min
Read →

EU AI Act Annex III Compliance Roadmap for December 2027

EU AI Act Annex III compliance checklist: deadline moved to December 2, 2027. Inventory, classify, document, assess, and monitor high-risk AI now.

eu-ai-actcomplianceenterprise-governancehigh-risk-ai
news·5 min
Read →

Connecticut Data Privacy Law Now Covers More Small Teams

Connecticut cuts its privacy law threshold to 35,000 consumers on July 1, 2026, plus two new no-threshold triggers. Does your team now qualify?

data-privacyconnecticutctdpastate-ai-law
guides·5 min
Read →

Does Your AI Vendor Train on Your Data? 7 Vendors Compared

Which AI tools train on your business data in 2026: ChatGPT, Claude, Gemini, Copilot, GitHub, Atlassian and Notion by plan, with the opt-out for each.

ai-data-privacyvendor-policygdprtraining-data
news·5 min
Read →

Russia's Project 2026 and AI Training Data Poisoning Risk

6 vendor risk checklist questions for small teams after Russia's SDA leaked plans to poison AI training data at scale. Bloomberg's June 2026 report.

ai-vendor-riskai-governancecybersecuritydisinformation
news·5 min
Read →

GPT-5.6 Stagger: 5 AI Procurement Policy Updates

5 AI procurement policy updates compliance teams need now that the White House forced OpenAI to stagger GPT-5.6 access. Are yours in place?

ai-governancefrontier-aiopenaigovernment-regulation
Templates·9 min
Read →

AI Compliance Checklist by Team Size: 1-10, 11-50, 51-200

Need an AI compliance checklist by team size? Use 3 tiers (1-10, 11-50, 51-200) with clear triggers for when to add vendor and incident response steps.

compliancechecklisttemplatessmall-teams
Guides·9 min
Read →

GDPR AI Fines 2026: Enforcement Cases for Small Teams

GDPR AI fines 2026: 7.1 billion euros and counting. Five enforcement cases explain why your vendor DPA will not shield small teams from risk.

gdprenforcementfinesprivacy