Skip to main content
0 days

Colorado ADMT rules: hearing and last day for written comments · Oct 26, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Guides·11 min
Read →

AI Incident Reporting: When You Must Notify Regulators

EU AI Act Article 73, FTC, and FDA all require AI incident reports. Know what triggers each regime, the deadlines, and how to comply across jurisdictions.

ai-governanceincident-reportingeu-ai-actcompliance
Guides·13 min
Read →

Multi-State AI Compliance: US and EU AI Laws at Once

Running 12 compliance tracks for 8 US state AI laws plus the EU AI Act? One multi-state AI compliance strategy for 2026 replaces them all.

ai-compliancemulti-stateeu-ai-actnist-ai-rmf
Security·13 min
Read →

TypeScript AI Agent Observability and Tracing Modules

5 paste-ready TypeScript AI agent observability modules: trace context, cost metering, event logging, tool-call tracing, and OpenTelemetry export.

ai-securitytypescriptobservabilityai-agents
Governance·9 min
Read →

Anthropic Recursive Self-Improvement: AI Governance Impact

Claude writes 80% of Anthropic's code. Which 4 documents does your recursive self-improvement AI governance policy need before this hits you?

ai-governanceai-safetyagentic-aihuman-oversight
Templates·11 min
Read →

Board AI Governance Reporting: What to Tell Your Board

What goes in your board AI governance report each quarter in 2026? Key metrics, SEC risk disclosures, and a copy-paste reporting template.

ai-governanceboard-reportingcompliancesec-disclosure
Governance·10 min
Read →

ChatGPT Dreaming V3 Memory: Privacy Risks for Work Accounts

ChatGPT Dreaming V3 persists your team's data across sessions. GDPR Article 17 applies. 4 enterprise actions: audit, disable, and update your vendor DPA.

ai-governancechatgptdata-privacygdpr
Guides·12 min
Read →

Shadow AI Policy for Small Teams: Detection and Governance

IBM found heavy shadow AI added $670K to average breach costs. How a small team can find unsanctioned AI tools and govern them without an IT department.

shadow-aiai-governanceai-policycompliance
Guides·12 min
Read →

NIST AI Red Teaming: What It Tests and How to Run One

Which AI red-teaming security testing requirements apply in 2026? NIST AI 600-1 explained, plus how small teams run a testing program.

ai-securityai-governancered-teamingcompliance
Governance·10 min
Read →

California AB 2013: AI Training Data Disclosure Guide

Which 12 training data disclosures does California AB 2013 require? AI training data transparency rules, who's covered, and the failed xAI suit.

ai-compliancecaliforniatraining-dataai-transparency
Guides·10 min
Read →

AI governance for legal teams: privilege and confidentiality

AI governance for legal teams and general counsel: check these 3 2026 risks before privilege waiver, ethics violations, or sanctions hit your firm.

legal-aiattorney-client-privilegeai-governancelegal-compliance
Governance·10 min
Read →

Amazon KiroRank and Tokenmaxxing: Measuring AI Adoption

Amazon scrapped KiroRank after staff gamed it with tokenmaxxing. Build AI adoption metrics that reward outcomes, not fake usage volume.

ai-governanceai-adoptionai-metricsengineering
Guides·10 min
Read →

BIPA and Facial Recognition AI: Employer Compliance Guide

Which AI tools trigger BIPA in 2026? Facial recognition, voice, and video-interview tools need written consent, a retention schedule, and a no-sale rule.

bipabiometric-privacyfacial-recognitionai-governance