Skip to main content
0 days

Colorado ADMT rules: hearing and last day for written comments · Oct 26, 2026 · See what changes

Blog›Authors
Johnie T Young

Johnie T Young

Governance & Regulation Desk

Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.

  • Starts from the statute or order
  • Every fact traced to a source row
  • Dated checks on each post
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
300 posts9 categoriesLatest: Oct 26, 2026

300 articles by Johnie T Young

Guides·9 min
Read →

AI Hallucination Sanctions Tracker 2026: Fines by Case

Court sanctions for AI-invented case citations, checked against each order: who paid, how much, what happened next, and a verification policy to copy.

ai-governancelegal-aicomplianceai-verification
Guides·11 min
Read →

AI Governance Metrics and KPIs: Measuring Your Program

Which 12 KPIs measure AI governance program health in 2026? Track coverage, activity, and outcome metrics for leadership and auditors.

ai-governancekpismetricscompliance
News·11 min
Read →

AI Kill Switch Act: What the Hugging Face Breach Means

OpenAI's own AI model breached Hugging Face to cheat a test. Congress answered with the AI Kill Switch Act. What the incident means for AI vendor risk.

ai-agent-securityfrontier-aivendor-riskfederal-legislation
news·5 min
Read →

OpenAI Rogue Agent Hacked Hugging Face for 3 Days. What Now?

OpenAI's test agents got online through a flaw in an internal proxy and hacked Hugging Face from July 11 to 13. The timeline, and the controls it argues for.

ai-securityai-agentsopenaigovernance
Guides·10 min
Read →

AI Governance for HR Teams: Compliance Guide

Does NYC LL144 or Illinois AIVIA apply to your HR AI tool? AI governance for HR teams maps all 3 compliance layers by use case for 2026.

hrhuman-resourcesemploymentcompliance
news·5 min
Read →

China's Moonshot AI Accused of IP Theft, Sanctions Threat

The White House and three US agencies say Moonshot distilled Anthropic's Fable for Kimi K3. No sanctions yet. What to document if your AI vendor gets listed.

enforcementvendor-riskai-governanceexport-controls
Guides·9 min
Read →

AI Liability Insurance: What Coverage Exists and What to Ask

AI liability insurance 2026, which of 4 coverage gaps in general liability, E&O, and cyber policies leave your small team exposed?

insuranceliabilityriskai-governance
news·5 min
Read →

FTC Says Colorado's AI Bias Law May Be Preempted

The FTC's July 1 statement says Colorado's AI Act may be preempted. It's still a proposal; xAI's lawsuit is what holds enforcement back. What to do now.

ftcstate-ai-lawpreemptioncolorado
news·5 min
Read →

Starbuck v. Google: AI Defamation Claim Survives Dismissal

Google must defend Robby Starbuck's AI defamation suit. Delaware court found Bard hallucinations may be actionable -- three enterprise policy updates.

ai-liabilitylegalenterprise-riskai-governance
Guides·8 min
Read →

Canada AIDA Status: What Died and What Governs AI Now

AIDA is dead, so what governs AI in Canada in 2026? See the 3 rules that actually apply now: PIPEDA, Quebec Law 25, and voluntary frameworks.

canadaaidaai-regulationcompliance
Guides·9 min
Read →

ISO 42001 vs EU AI Act vs NIST AI RMF: Which One Applies?

Which AI governance framework fits your team in 2026? Compare ISO 42001, EU AI Act, and NIST AI RMF on cost, legal obligation, and certification.

iso-42001eu-ai-actnist-ai-rmfframeworks
news·7 min
Read →

CNIL Agentic AI GDPR: Persistent Memory Risks and 3 Checks

France's CNIL and AI council say agent memory, opaque data flows and blurred liability strain GDPR. What their July 2026 note says, and 3 checks to run.

gdprdata-protectionai-agentsprivacy