Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
300 articles by Johnie T Young
New Jersey FAIR Act: Algorithmic Rent Pricing Ban Guide
New Jersey's FAIR Act (P.L.2026 c.43) bans rent-setting software that pools competitor data. Gov. Sherrill signed July 20. July 1, 2027 deadline.
Synthetic data and GDPR: what to document in 2026
Synthetic data isn't outside GDPR by default. What the EDPB's draft anonymisation guidelines, AB 2013 and the AI Act ask you to write down, as a checklist.
CNIL Credit Scoring Rules and the AI Act: What Applies When
CNIL's May 2026 credit recommendation applies now under the GDPR. The AI Act's credit scoring rules start December 2, 2027. What lenders do in each window.
AI Compliance Program Maturity Model for 2026
Where does your AI compliance program maturity model score land for 2026? Take the 25-question self-assessment to find your level now.
SOC 2 for AI Systems: What Auditors Check
What SOC 2 AI controls do auditors check in 2026? All 5 trust service criteria, common gaps, and prep steps before your next audit.
Meta Skipped the EU AI Code: What Llama Deployers Must Do
Meta did not sign the EU GPAI Code of Practice, so it must prove compliance another way. If you run Llama, here is what changed after August 2, 2026.
EU AI Act SME Support and Sandboxes: What Small Firms Get
What the EU AI Act gives SMEs: free sandbox access with priority, a simplified Annex IV form, lighter quality management and lower fines. Who qualifies.
EU AI Act Article 72: Post-Market Monitoring Requirements
What must EU AI Act post-market monitoring cover? Article 72 sets the coverage, incident reporting timelines, and documentation for high-risk AI.
Minnesota Nudify Ban Paused for xAI on Appeal
The Eighth Circuit granted xAI an injunction pending appeal on Oct 2, after a judge let the law take effect Aug 1. What the order says and leaves open.
EU AI Act Article 13: What Deployers Must Tell Users
EU AI Act Article 13: what providers tell deployers, plus the Article 26(11) notice to people. Applies Dec 2, 2027 (Annex III), Aug 2, 2028 (Annex I).
Midjourney and SB 942: what California's AI law requires now
SB 1000 removed SB 942's user threshold. Any image, video or audio generator open to Californians owes a hidden disclosure and a free verification tool.
EU AI Act Deployer Evidence Gaps: SME Checklist
Which of these 5 EU AI Act deployer evidence gaps do you still have after August 2, 2026? Fix each with a copy-paste documentation template inside.