Skip to main content
0 days

Colorado ADMT rules: hearing and last day for written comments · Oct 26, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Guides·8 min
Read →

AI Compliance Cost for Small Teams: What You Actually Pay

AI compliance cost for small teams in 2026: most 1-50 person orgs pay under $5,000 a year unless bias audits apply. Full breakdown by size.

compliancecostbudgetsmall-teams
AI Security·5 min
Read →

AI Agent API Token Leak: 24-Hour Incident Response Playbook

24-hour runbook for leaked AI agent tokens: revoke, rotate, audit blast radius, and restore access before costs spiral. 7 copy-paste steps.

ai-securityincident-responseapi-tokensai-agents
Guides·10 min
Read →

EU AI Act Digital Omnibus: High-Risk Deadline Now Dec 2027

The Digital Omnibus has been law since July 27, 2026: Annex III high-risk rules apply December 2, 2027. Article 50 and GPAI enforcement started August 2, 2026.

eu-ai-actdigital-omnibusaugust-2026deadlines
Guides·9 min
Read →

AI Coding Tools and SSD Wear: Acceptable Use Policy Gaps

A Codex bug report extrapolated 640 TB/year of SQLite log writes. The fixes came in waves through July. Here are the AUP clauses and Codex settings to add.

ai-governanceacceptable-use-policyai-coding-toolsshadow-ai
Guides·9 min
Read →

NYC Local Law 144 AI Bias Audit: Employer Guide 2026

What does the NYC Local Law 144 AI bias audit require? Independent audits, published results, candidate notice, fines to $1,500 daily. Six-step checklist.

nyclocal-law-144bias-audithiring
Guides·9 min
Read →

Trump's June 2026 AI Executive Order: What Teams Must Do

Which parts of Trump's June 2026 AI executive order bind federal contractors? See what's mandatory, what's voluntary, and what to do now.

ai-governanceexecutive-orderfederal-contractorsai-compliance
Guides·11 min
Read →

AI Browser Agents (Atlas, Comet): Policy for Small Teams

Get the 7-point AI browser agent governance policy for Atlas and Comet, block sensitive access, log agent actions, brief staff on prompt injection.

ai-agentsai-browserprompt-injectionai-security
Guides·10 min
Read →

AI Meeting Transcription Apps: Data Risks for Your Team

Does GDPR apply to AI meeting transcription tools? 8 apps compared for data privacy compliance, retention risk, and transfer rules.

shadow-aiai-privacygdprcompliance
Guides·8 min
Read →

Amazon KDP AI Content Surge: Account-Level Enforcement

KDP's monthly e-book releases nearly tripled from 2022 to 2025. Amazon now enforces undisclosed AI content at account level. What to document first.

amazon-kdpai-disclosureai-compliancepublishing
Guides·9 min
Read →

Human-in-the-Loop AI: What EU AI Act Article 14 Requires

EU AI Act Article 14 requires real-time human intervention, not a review button. Use this 10-item checklist to test vendor human-in-the-loop claims.

eu-ai-acthuman-oversighthitlcompliance
Guides·9 min
Read →

OpenAI Trust Portal: GDPR Article 28 Guide for Enterprise

OpenAI's trust portal covers SOC 2, ISO 27701, and a GDPR Article 28 DPA. Here's which certs apply to each tier before deploying ChatGPT Enterprise.

openaichatgptprivacygdpr
Guides·8 min
Read →

Pentagon Grok AI Use: What It Means for AI Governance

Pentagon's Grok AI fired 2,000+ munitions at Iran in 96 hours. Does your enterprise AI governance survive the same sworn-testimony scrutiny?

ai-governanceautonomous-aihuman-oversightaccountability