Skip to main content
32 days

Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Governance·7 min
Read →

ChatGPT Team (Business) vs Enterprise: DPA, SCIM, Logs

Both include a GDPR DPA and no training on your data. Enterprise adds SCIM automated offboarding, extended audit logs and custom data retention.

chatgptopenaivendor-riskcompliance
Governance·7 min
Read →

Claude vs ChatGPT Compliance: DPA, Retention, HIPAA

Claude Team vs ChatGPT Business for small teams: DPA terms, breach notice, retention, EU residency and HIPAA, checked on both vendors' own pages.

vendor-riskai-securitygovernancegdpr
Governance·10 min
Read →

Microsoft 365 vs Google Workspace GDPR: Copilot vs Gemini

Copilot vs Gemini for your GDPR file: training, DPA, EU Data Boundary (Anthropic excluded), where Gemini processes data, audit log retention, HIPAA, price.

vendor-riskmicrosoft-copilotgoogle-workspacegdpr
Governance·8 min
Read →

Claude Code Source Leak: What Happened, Governance Lessons

What did the Claude Code source leak expose? 5 governance lessons from the 512,000-line npm slip for small teams that depend on AI tools.

ai-governanceclaudeanthropicvendor-security
Governance·10 min
Read →

AI Adoption Governance: Stop the Quiet Rebellion

80% of employees bypass or avoid company AI tools. How small teams close the governance trust gap and stop shadow AI use without triggering a rebellion.

shadow AIAI adoptionAI governanceworkplace AI
Governance·11 min
Read →

AI Rollout Governance: Checklist to Stop Employee Resistance

29% of employees resist company AI rollouts. Root causes: fear of displacement, output distrust, and governance opacity. Steps to address each one.

ai-adoptionai-governanceemployee-ai-policychange-management
Governance·11 min
Read →

Shadow AI Governance: Detection and Controls for Tech Teams

CASB misses browser-based personal AI sessions. Shadow AI governance for tech teams: real visibility into unapproved AI use without blocking engineers.

shadow-aicasbai-governancevisibility
Governance·10 min
Read →

OpenAI's New Deal Policy: 3 Steps for Small Teams

OpenAI's New Deal policy paper: federal AI regulation is 2+ years away. Three steps your team must complete now: tool inventory (2 hrs), one-page use policy, incident log. Copy-paste checklist included.

ai-regulationpolicygovernanceopenai
Guides·9 min
Read →

AI Coding Tool Governance: Cap Copilot and Claude Code Spend

Copilot now bills in AI credits and Claude Code averages $150-250 per developer a month. Six controls that keep AI coding tool spend inside a budget.

cost governanceAI coding toolsROItoken costs
Templates·8 min
Read →

CEO AI Tool Approval Checklist: Questions Before You Say Yes

Before approving Cursor, ChatGPT, Claude, or Notion AI, run these 10 questions. Takes 30 minutes and prevents most governance mistakes small teams make.

checklistsecurityceotools
Governance·10 min
Read →

AI Enforcement 2026: FTC, SEC, State AGs, DOJ and EEOC

FTC, SEC, state AGs, DOJ, and EEOC are all pursuing AI enforcement simultaneously using existing law, no new federal AI statute required. Four enforcement tracks running now: deceptive AI claims (FTC Section 5), AI washing in investor comms (SEC), biased automated decisions (EEOC), inadequate incident disclosure.

ai-enforcementftcai-regulationcompliance
Governance·9 min
Read →

AI Training Data Copyright: What the Bartz Ruling Means

Bartz ruling 2026: AI training on licensed books is fair use, pirated copies are not. What it means for data provenance and legal risk for small teams.

ai-copyrightai-governancetraining-datalegal-risk