Skip to main content
32 days

Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Guides·10 min
Read →

Anthropic vs OpenAI GDPR: DPA, Retention, Sub-Processors

Anthropic vs OpenAI under GDPR: both sign a DPA and neither trains on API data. They differ on EU residency, breach notice, sub-processors and deletion.

gdprai-governancevendor-riskanthropic
Guides·6 min
Read →

EU AI Act Deadline Extended: What the Digital Omnibus Means

EU AI Act deadline extension 2026: Annex III moves to December 2, 2027. GPAI enforcement holds at August 2, 2026. Use the 6-point checklist.

eu-ai-actcomplianceai-governancedeadline
Templates·7 min
Read →

AI Acceptable Use Policy Generator: Fill-in Template

Fill in 5 fields on this AI acceptable use policy template to cover approved tools, prohibited uses, data rules, and oversight in 30 minutes.

ai-policytemplatesai-governancecompliance
Templates·9 min
Read →

AI Vendor DPA Tracker 2026: GDPR DPAs and Training Opt-Outs

Which AI tools offer a GDPR DPA, train on your data, or keep data in the EU, now with Notion AI, Zoom, Grammarly and DeepSeek. Checked on vendor pages.

gdprdpavendor-riskai-governance
Templates·9 min
Read →

AI coding tools policy: GitHub Copilot, Cursor, Claude Code

Which Copilot, Cursor and Claude Code plans train on your code, how long each keeps prompts, and a copy-paste AI coding tools policy for your team.

ai-governanceai-coding-toolsgithub-copilotdeveloper-tools
Templates·10 min
Read →

AI Acceptable Use Policy Template: Free Copy for Small Teams

Free 10-section AI acceptable use policy template, copy-paste ready for teams of 5-50. Covers tools, data rules, incident reporting, sign-off.

ai-governanceai-policytemplatescompliance
Governance·10 min
Read →

40 AI Prompts for Vendor Evaluation (Copy-Paste Ready)

40 AI vendor evaluation prompts to copy-paste into RFPs, procurement calls, and security reviews on privacy, security, compliance, SLA, and contracts.

vendor-riskprocurementai-governancecompliance
Governance·9 min
Read →

What Is the EU AI Act? Plain-English Guide (2026)

The EU AI Act is a binding EU law that sorts AI by risk. High-risk rules apply from December 2027 (hiring, credit) and August 2028 (AI in medical devices).

eu-ai-actai-regulationcomplianceai-governance
Guides·10 min
Read →

AI Governance for Remote and Distributed Teams

AI governance for remote teams needs 3 structural fixes: no ambient office signals, cross-border data transfer risk, and shadow AI hiding for months.

ai-governanceremote-workshadow-aicompliance
Governance·18 min
Read →

AI Governance for Small Teams: The Complete Guide (2026)

AI governance for a small team or small business: policy, tool inventory, risk tiers, vendor checks, monitoring and sector rules, with a 29-item checklist.

ai-governancecompliancepolicyrisk-assessment
Compliance·14 min
Read →

EU AI Act Compliance for Small Teams: The Complete Guide

EU AI Act for small teams: Annex III high-risk duties apply from Dec 2, 2027 after the Digital Omnibus. What applies now, what's next, what to ask vendors.

eu-ai-actcomplianceai-governancesmall-teams
Compliance·10 min
Read →

Fintech AI Governance: CFPB, FCRA and AI Credit Decisions

What must fintechs disclose when AI denies credit? CFPB adverse action rules, FCRA accuracy duties, and EU AI Act high-risk steps, plus templates.

fintech-aicfpbfcraeu-ai-act