
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
300 articles by Johnie T Young
ChatGPT Team (Business) vs Enterprise: DPA, SCIM, Logs
Both include a GDPR DPA and no training on your data. Enterprise adds SCIM automated offboarding, extended audit logs and custom data retention.
Claude vs ChatGPT Compliance: DPA, Retention, HIPAA
Claude Team vs ChatGPT Business for small teams: DPA terms, breach notice, retention, EU residency and HIPAA, checked on both vendors' own pages.
Microsoft 365 vs Google Workspace GDPR: Copilot vs Gemini
Copilot vs Gemini for your GDPR file: training, DPA, EU Data Boundary (Anthropic excluded), where Gemini processes data, audit log retention, HIPAA, price.
Claude Code Source Leak: What Happened, Governance Lessons
What did the Claude Code source leak expose? 5 governance lessons from the 512,000-line npm slip for small teams that depend on AI tools.
AI Adoption Governance: Stop the Quiet Rebellion
80% of employees bypass or avoid company AI tools. How small teams close the governance trust gap and stop shadow AI use without triggering a rebellion.
AI Rollout Governance: Checklist to Stop Employee Resistance
29% of employees resist company AI rollouts. Root causes: fear of displacement, output distrust, and governance opacity. Steps to address each one.
Shadow AI Governance: Detection and Controls for Tech Teams
CASB misses browser-based personal AI sessions. Shadow AI governance for tech teams: real visibility into unapproved AI use without blocking engineers.
OpenAI's New Deal Policy: 3 Steps for Small Teams
OpenAI's New Deal policy paper: federal AI regulation is 2+ years away. Three steps your team must complete now: tool inventory (2 hrs), one-page use policy, incident log. Copy-paste checklist included.
AI Coding Tool Governance: Cap Copilot and Claude Code Spend
Copilot now bills in AI credits and Claude Code averages $150-250 per developer a month. Six controls that keep AI coding tool spend inside a budget.
CEO AI Tool Approval Checklist: Questions Before You Say Yes
Before approving Cursor, ChatGPT, Claude, or Notion AI, run these 10 questions. Takes 30 minutes and prevents most governance mistakes small teams make.
AI Enforcement 2026: FTC, SEC, State AGs, DOJ and EEOC
FTC, SEC, state AGs, DOJ, and EEOC are all pursuing AI enforcement simultaneously using existing law, no new federal AI statute required. Four enforcement tracks running now: deceptive AI claims (FTC Section 5), AI washing in investor comms (SEC), biased automated decisions (EEOC), inadequate incident disclosure.
AI Training Data Copyright: What the Bartz Ruling Means
Bartz ruling 2026: AI training on licensed books is fair use, pirated copies are not. What it means for data provenance and legal risk for small teams.