
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
300 articles by Johnie T Young
AI Compliance Cost for Small Teams: What You Actually Pay
AI compliance cost for small teams in 2026: most 1-50 person orgs pay under $5,000 a year unless bias audits apply. Full breakdown by size.
AI Agent API Token Leak: 24-Hour Incident Response Playbook
24-hour runbook for leaked AI agent tokens: revoke, rotate, audit blast radius, and restore access before costs spiral. 7 copy-paste steps.
EU AI Act Digital Omnibus: High-Risk Deadline Now Dec 2027
The Digital Omnibus has been law since July 27, 2026: Annex III high-risk rules apply December 2, 2027. Article 50 and GPAI enforcement started August 2, 2026.
AI Coding Tools and SSD Wear: Acceptable Use Policy Gaps
A Codex bug report extrapolated 640 TB/year of SQLite log writes. The fixes came in waves through July. Here are the AUP clauses and Codex settings to add.
NYC Local Law 144 AI Bias Audit: Employer Guide 2026
What does the NYC Local Law 144 AI bias audit require? Independent audits, published results, candidate notice, fines to $1,500 daily. Six-step checklist.
Trump's June 2026 AI Executive Order: What Teams Must Do
Which parts of Trump's June 2026 AI executive order bind federal contractors? See what's mandatory, what's voluntary, and what to do now.
AI Browser Agents (Atlas, Comet): Policy for Small Teams
Get the 7-point AI browser agent governance policy for Atlas and Comet, block sensitive access, log agent actions, brief staff on prompt injection.
AI Meeting Transcription Apps: Data Risks for Your Team
Does GDPR apply to AI meeting transcription tools? 8 apps compared for data privacy compliance, retention risk, and transfer rules.
Amazon KDP AI Content Surge: Account-Level Enforcement
KDP's monthly e-book releases nearly tripled from 2022 to 2025. Amazon now enforces undisclosed AI content at account level. What to document first.
Human-in-the-Loop AI: What EU AI Act Article 14 Requires
EU AI Act Article 14 requires real-time human intervention, not a review button. Use this 10-item checklist to test vendor human-in-the-loop claims.
OpenAI Trust Portal: GDPR Article 28 Guide for Enterprise
OpenAI's trust portal covers SOC 2, ISO 27701, and a GDPR Article 28 DPA. Here's which certs apply to each tier before deploying ChatGPT Enterprise.
Pentagon Grok AI Use: What It Means for AI Governance
Pentagon's Grok AI fired 2,000+ munitions at Iran in 96 hours. Does your enterprise AI governance survive the same sworn-testimony scrutiny?