Skip to main content
32 days

Super Intelligence definition proposal due (60 days) · Nov 28, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Governance·9 min
Read →

Colorado AI Act Compliance: What SB 26-189 Requires in 2027

Colorado AI Act compliance under SB 26-189: the notice, adverse-outcome explanation, correction and human review duties, with copy-paste templates.

colorado-ai-actai-regulationcompliancestate-ai-laws
Governance·11 min
Read →

Federal AI Preemption: Which State AI Laws Still Apply

No federal AI preemption has passed. 10+ state AI laws are live obligations now. Which states apply to your team and what changes if preemption passes.

ai-regulationcompliancefederal-ai-lawstate-ai-laws
Governance·10 min
Read →

SEC AI Examination 2026: What Examiners Will Ask About AI

The SEC embedded AI oversight into every FY2026 exam category. The questions examiners ask and documentation needed for investment and compliance teams.

sec-complianceai-governancefinancial-servicesmodel-risk
Governance·12 min
Read →

AI Vendor Security Incident Response: A 4-Step Playbook

When your AI vendor has a security incident, your team has hours to respond. Scope, credential rotation, and documentation steps for small teams.

ai-securityincident-responsevendor-riskgovernance
Compliance·20 min
Read →

AI Data Privacy for Small Teams: GDPR and CCPA Checklist

Which of 9 AI tools are GDPR and CCPA compliant? Compare DPA status, training data opt-out rules, and 2026 enforcement fines for small teams.

gdprccpaprivacygovernance
Guides·16 min
Read →

AI Governance Roles and Responsibilities for Small Teams

Three named roles cover AI governance for teams of 5-50 without dedicated compliance staff. Copy-paste RACI, escalation matrix, and EU AI Act role requirements included.

governancerolesraciframework
Guides·8 min
Read →

Governing Embedded AI in Third-Party Tools

Notion AI, Copilot, HubSpot AI, and Zoom AI ship embedded features your team uses whether you approved them or not. How to audit and govern each tool.

embedded-aisaasvendor-riskgovernance
Templates·7 min
Read →

AI Register Template for Small Teams (2026)

Copy-paste AI register template: one row per tool, tracks owner, data sensitivity, DPA status, and review date. Covers approved tools and shadow AI.

templatesinventorygovernanceaudit
Templates·13 min
Read →

AI Vendor Due Diligence Questionnaire: 30-Minute Gate

AI vendor due diligence questionnaire: 5 gate questions, 8 deep questions, the evidence to file and a 1-3 scoring sheet, run on OpenAI and Anthropic terms.

vendorprocurementsecuritytemplates
Templates·7 min
Read →

AI Vendor Evaluation Checklist for Small Teams (20-Point)

Checklist to evaluate AI vendors before signing: data handling, training opt-out, DPA availability, security certifications, and exit rights. Under 30 min.

vendorchecklistprocurementsecurity
Templates·6 min
Read →

AI Governance Checklist (2026)

Quarterly AI governance checklist for small teams: inventory, policy currency, vendor DPA status, incident log review, and training refresh.

checklistgovernanceauditsmb
Templates·8 min
Read →

ChatGPT usage policy for employees: copy-paste template

A ChatGPT usage policy for employees you can paste today: which account to use, what staff can and cannot paste, and what to do after a leak.

chatgptpolicyemployeesusage