Skip to main content
32 days

Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Governance·10 min
Read →

HR AI Governance: EU AI Act and EEOC Rules for AI Hiring

HR AI governance for hiring decisions: EU AI Act high-risk rules hit by Dec 2027, EEOC bars disparate impact. Assessments, bias tests, disclosure required.

hr-aiai-governanceeu-ai-acthiring
Compliance·16 min
Read →

Privacy-First AI APIs: Which Ones Don't Train on Your Data

5 AI APIs that don't train on your data by default: Claude API, Azure OpenAI, Vertex AI, OpenAI API, Amazon Bedrock. Retention, EU residency, DPA terms.

ai-privacygdprccpaai-apis
Security·14 min
Read →

TypeScript AI Agent Security Incident Response Playbook

4 drop-in TypeScript files (64 to 118 lines) with a 20-test Vitest suite: an incident response playbook for prompt injection, runaway loops and tool calls.

ai-securitytypescriptincident-responseai-agents
Governance·8 min
Read →

AI Vendor Supply Chain Security Checklist for Small Teams

Respond within 24 hours: AI vendor supply chain security checklist to map exposure, scope access, and contain a contractor breach like Vercel's.

ai-securityvendor-risksupply-chainincident-response
Governance·8 min
Read →

AI in Virtual Data Rooms: Compliance and Governance Guide

AI features in VDRs create data handling and compliance obligations. Access controls, training opt-outs, and audit log requirements before enabling VDR AI.

vendor-riskdue-diligenceai-compliancegovernance
Governance·14 min
Read →

AI Vendor Due Diligence Checklist: 30 Pass/Fail Checks

30-question AI vendor due diligence checklist: security, data handling, compliance, and contract terms. Pass/fail criteria for each. Copy into your review.

vendor-riskdue-diligencechecklistai-security
Governance·16 min
Read →

Amazon KDP AI Disclosure: Exact Checkbox Wording, Policy & Decision Flowchart (2026)

Which box do you check? Copy the exact Amazon KDP AI disclosure wording for text, images, and translations, plus a 3-question decision flowchart.

ai-complianceamazon-kdpai-disclosuregovernance
Governance·8 min
Read →

GitHub Copilot and AI Code Assistants: Governance, IP Risk

GitHub Copilot has 4.7 million paid users. Does your GitHub Copilot governance policy cover source code exposure, IP risk, and org settings yet?

ai-securitygovernanceai-complianceip-risk
Governance·9 min
Read →

AI Governance for Healthcare Startups: HIPAA and HITECH

ChatGPT.com is not HIPAA compliant by default. Healthcare startups need a BAA, a PHI data boundary, and an EU AI Act plan for diagnostic tools.

hipaahealthcareeu-ai-actcompliance
Governance·8 min
Read →

How to Add AI Tools to Your SOC 2 Program

SOC 2 auditors now ask about ChatGPT, Copilot, and Claude. Which Trust Service Criteria AI affects, what evidence you need, and how to scope AI tools.

soc2complianceai-securityvendor-risk
Governance·9 min
Read →

Notion AI vs Microsoft 365 Copilot: Small Team Compliance

Notion AI and Microsoft 365 Copilot handle data retention, training opt-out, and EU residency differently. Governance comparison for small teams in 2026.

vendor-riskai-toolsgdprgovernance
Governance·8 min
Read →

Best AI Tools for Small Teams: Compliance Ratings by Plan

Which plans of ChatGPT, Claude, Microsoft 365 Copilot, Gemini, Notion AI, Grammarly, GitHub Copilot and Cursor come with a DPA, train on data or log use.

vendor-riskai-securitygovernancegdpr