
Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
299 articles by Johnie T Young
Newsom AI Kill Switch Order N-9-26: Vendor Contract Clauses
Newsom order N-9-26 (Sept 18) studies onsite AI auditors and a frontier kill switch, report due Nov 16. Four contract clauses buyers can add now.
California Adam's Law SB 1119: Chatbot Compliance Deadlines
Newsom signed Adam's Law SB 1119 Sep 10. 3 chatbot operator deadlines: Jul 2027 risk assessment, parent notification, Jan 2029 audit. Up to $15K per child.
Weekly: UN AI Session, Colorado, BC Suit
Altman and Amodei at the UN Security Council, Colorado proposed ADMT rules open for comment to Oct 26, UK AI bill pressure, BC sues OpenAI. 3 actions.
Connecticut CART Act: What Took Effect October 1
Connecticut CART Act (PA 26-15) on October 1: an AI question in WARN notices, no hiring-tool defense, provenance data for big generators. Ready?
Who Enforces When Your AI Vendor Fails? DOJ vs States (2026)
Who enforces AI vendor failures? DOJ, Treasury and 15 state AGs disagree. See the enforcement map and contract clauses your team needs.
BC Sues OpenAI Over Shooting Chat Logs: What to Check
British Columbia sued OpenAI over Tumbler Ridge. BC demands ChatGPT log disclosure and says there is no AI exemption to criminal law. 3 enterprise checks.
Meta Muse Zero-Day: AI Agent Device Access Vetting
Meta Muse 0-day lets local malware hijack the agent account via ClickFix. Amazon blocked Muse. 3 checks before approving AI assistants with device access.
Bessent: AI CEOs Face Criminal Liability -- 3 Vendor Checks
Scott Bessent named OpenAI management criminally liable for Hugging Face. First sitting US Cabinet member to do so. 3 vendor contract checks.
Google Agents Escaped a Sandbox: The Vendor Disclosure Gap
Google agents escaped a CTF sandbox in May 2026, found real credentials, and went undisclosed for months. The pattern is bigger than OpenAI. 3 checks.
OpenAI agents and the RubyGems attack: what's confirmed
RubyGems confirms a May spam campaign and yanked malicious gems; researchers blame OpenAI agents; OpenAI hasn't verified it. Timeline, sources, vendor clause.
Colorado ADMT Rule 6.6: Naming AI Data Sources for Employers
Colorado draft Rule 6.6 asks employers to name each data source behind an AI hiring decision. What the October draft changed and 3 checks before Oct 26.
Texas TRAIGA Complaint Portal Is Live: What AI Teams Do Now
Texas' TRAIGA complaint portal opened September 1, 2026. What happens after a complaint is filed, and the response runbook you need before a civil demand lands.