
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
300 articles by Johnie T Young
Colorado AI Act Compliance: What SB 26-189 Requires in 2027
Colorado AI Act compliance under SB 26-189: the notice, adverse-outcome explanation, correction and human review duties, with copy-paste templates.
Federal AI Preemption: Which State AI Laws Still Apply
No federal AI preemption has passed. 10+ state AI laws are live obligations now. Which states apply to your team and what changes if preemption passes.
SEC AI Examination 2026: What Examiners Will Ask About AI
The SEC embedded AI oversight into every FY2026 exam category. The questions examiners ask and documentation needed for investment and compliance teams.
AI Vendor Security Incident Response: A 4-Step Playbook
When your AI vendor has a security incident, your team has hours to respond. Scope, credential rotation, and documentation steps for small teams.
AI Data Privacy for Small Teams: GDPR and CCPA Checklist
Which of 9 AI tools are GDPR and CCPA compliant? Compare DPA status, training data opt-out rules, and 2026 enforcement fines for small teams.
AI Governance Roles and Responsibilities for Small Teams
Three named roles cover AI governance for teams of 5-50 without dedicated compliance staff. Copy-paste RACI, escalation matrix, and EU AI Act role requirements included.
Governing Embedded AI in Third-Party Tools
Notion AI, Copilot, HubSpot AI, and Zoom AI ship embedded features your team uses whether you approved them or not. How to audit and govern each tool.
AI Register Template for Small Teams (2026)
Copy-paste AI register template: one row per tool, tracks owner, data sensitivity, DPA status, and review date. Covers approved tools and shadow AI.
AI Vendor Due Diligence Questionnaire: 30-Minute Gate
AI vendor due diligence questionnaire: 5 gate questions, 8 deep questions, the evidence to file and a 1-3 scoring sheet, run on OpenAI and Anthropic terms.
AI Vendor Evaluation Checklist for Small Teams (20-Point)
Checklist to evaluate AI vendors before signing: data handling, training opt-out, DPA availability, security certifications, and exit rights. Under 30 min.
AI Governance Checklist (2026)
Quarterly AI governance checklist for small teams: inventory, policy currency, vendor DPA status, incident log review, and training refresh.
ChatGPT usage policy for employees: copy-paste template
A ChatGPT usage policy for employees you can paste today: which account to use, what staff can and cannot paste, and what to do after a leak.