Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
295 articles by Johnie T Young
Guides·10 min
Read →AI Agent Memory and GDPR: How to Handle Persistent Context Without a Compliance Timebomb
Can your AI agent erase a user from its vector database? Spanish regulators found most cannot. Fix AI agent GDPR memory compliance before an audit.
gdprai-agentsprivacyrag
Guides·10 min
Read →AI Output Copyright Risk: Which Providers Indemnify You and What to Do Before Publishing (2026)
Which AI providers indemnify your output? Compare policies and use this pre-publish checklist to manage AI output copyright risk in 2026.
copyrightai-contentlegalindemnification
Guides·10 min
Read →State Chatbot Disclosure Laws 2026: The Compliance Checklist Every SaaS Team Needs
12+ states now require AI chatbot disclosure. California SB 243 creates a private right of action: users can sue if your bot claims to be human. Here is what SaaS teams must do in 2026.
chatbotdisclosurecaliforniasaas-compliance
Guides·10 min
Read →AI employee monitoring laws 2026: what employers can and cannot do
What can employers legally monitor with AI in 2026? 11+ US states and GDPR require notice, restrict certain uses, and set rules for compliant policies.
employee-monitoringemployment-lawai-governanceworkplace-privacy
Guides·10 min
Read →GenAI Vendor Risk Assessment: A Framework for 2026 (Treasury FS AI RMF + SOC 2)
Does your SOC 2 cover bias audits and hallucination testing? Treasury's FS AI RMF says no. Here is a GenAI vendor risk assessment framework that does.
vendor-assessmentai-governancethird-party-riskcompliance
Guides·10 min
Read →AI Bias Audit Requirements by State (2026): NYC, Colorado, Minnesota, New Jersey Compared
NYC Local Law 144 is no longer the only AI bias audit requirement. Colorado, Minnesota, and New Jersey all have active requirements for HR teams using algorithmic decision tools in 2026. Here's what each state requires and what a multi-state employer must do.
ai-hiringbias-auditcompliancehr
Guides·9 min
Read →Texas TRAIGA Biometric AI in Hiring: Consent, Audit, and What HR Teams Must Do (2026)
Texas TRAIGA requires explicit consent before collecting biometric data in AI hiring tools, even from public sources. Here's what HR teams and AI vendors using facial recognition, voice analysis, or video interviews must do.
ai-hiringtexasbiometrictraiga
Guides·11 min
Read →FTC AI Marketing Claims 2026: 8-Step Substantiation Checklist (Cox Media Group $930K)
8 steps to nail FTC AI marketing claims compliance in 2026, before unsubstantiated claims cost you $930K like Cox Media Group's FTC settlement.
ftcai-complianceai-marketingai-governance
Guides·11 min
Read →Georgia SB 540 AI chatbot law: what operators must do before July 2027
Georgia SB 540 takes effect July 1, 2027. $10,000 per knowing violation. Here is what chatbot operators must build into their products before the deadline.
georgiaai-compliancechatbotstate-ai-laws
Guides·9 min
Read →AI Regulatory Readiness Scorecard: 25-Question Self-Assessment for Software and Biotech Teams (2026)
A 25-question yes/no scorecard to assess your AI regulatory readiness across EU AI Act, EEOC, GDPR/CCPA, FDA AI guidance, and Colorado SB 26-189. Score yourself and get a tiered verdict, from baseline to audit-ready. Built for software and biotech teams with August 2026 deadlines approaching.
ai-regulatory-readinesseu-ai-actsoftware-aibiotech-ai
Guides·8 min
Read →Colorado SB 26-189 Signed: What Changed in the AI Law and What Employers Must Do Before January 2027
Colorado SB 26-189 AI law replaces impact assessments with notice and disclosure before January 1, 2027. See the 8-step employer checklist.
colorado-ai-lawsb-189employer-compliancealgorithmic-decisions
Guides·13 min
Read →GDPR-Compliant AI Assistants: Claude, ChatGPT Enterprise, Gemini, and Mistral Compared (2026)
6 GDPR checks your DPO will run on any AI assistant: EU residency, DPA, Article 28, training opt-out, SOC 2, and self-hosting. See which tools pass.
gdprai-assistantscompliancedata-privacy