
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
300 articles by Johnie T Young
AI Incident Reporting: When You Must Notify Regulators
EU AI Act Article 73, FTC, and FDA all require AI incident reports. Know what triggers each regime, the deadlines, and how to comply across jurisdictions.
Multi-State AI Compliance: US and EU AI Laws at Once
Running 12 compliance tracks for 8 US state AI laws plus the EU AI Act? One multi-state AI compliance strategy for 2026 replaces them all.
TypeScript AI Agent Observability and Tracing Modules
5 paste-ready TypeScript AI agent observability modules: trace context, cost metering, event logging, tool-call tracing, and OpenTelemetry export.
Anthropic Recursive Self-Improvement: AI Governance Impact
Claude writes 80% of Anthropic's code. Which 4 documents does your recursive self-improvement AI governance policy need before this hits you?
Board AI Governance Reporting: What to Tell Your Board
What goes in your board AI governance report each quarter in 2026? Key metrics, SEC risk disclosures, and a copy-paste reporting template.
ChatGPT Dreaming V3 Memory: Privacy Risks for Work Accounts
ChatGPT Dreaming V3 persists your team's data across sessions. GDPR Article 17 applies. 4 enterprise actions: audit, disable, and update your vendor DPA.
Shadow AI Policy for Small Teams: Detection and Governance
IBM found heavy shadow AI added $670K to average breach costs. How a small team can find unsanctioned AI tools and govern them without an IT department.
NIST AI Red Teaming: What It Tests and How to Run One
Which AI red-teaming security testing requirements apply in 2026? NIST AI 600-1 explained, plus how small teams run a testing program.
California AB 2013: AI Training Data Disclosure Guide
Which 12 training data disclosures does California AB 2013 require? AI training data transparency rules, who's covered, and the failed xAI suit.
AI governance for legal teams: privilege and confidentiality
AI governance for legal teams and general counsel: check these 3 2026 risks before privilege waiver, ethics violations, or sanctions hit your firm.
Amazon KiroRank and Tokenmaxxing: Measuring AI Adoption
Amazon scrapped KiroRank after staff gamed it with tokenmaxxing. Build AI adoption metrics that reward outcomes, not fake usage volume.
BIPA and Facial Recognition AI: Employer Compliance Guide
Which AI tools trigger BIPA in 2026? Facial recognition, voice, and video-interview tools need written consent, a retention schedule, and a no-sale rule.