Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
371 articles by Johnie T Young
Templates·9 min
Read →AI compliance checklist by team size: Tier 1 (1-10), Tier 2 (11-50), Tier 3 (51-200)
Need an AI compliance checklist by team size? Use 3 tiers (1-10, 11-50, 51-200) with clear triggers for when to add vendor and incident response steps.
compliancechecklisttemplatessmall-teams
guides·5 min
Read →Does Your AI Vendor Train on Your Business Data? 11 Vendors Compared (2026 Policy Guide)
11 AI vendors compared: which ones train on your business data in 2026? See opt-out steps for ChatGPT, Copilot, and Atlassian's August deadline.
ai-data-privacyvendor-policygdprtraining-data
Guides·9 min
Read →GDPR AI fines 2026: enforcement cases and what small teams must know
GDPR AI fines 2026: 7.1 billion euros and counting. Five enforcement cases explain why your vendor DPA will not shield small teams from risk.
gdprenforcementfinesprivacy
Guides·8 min
Read →AI compliance cost for small teams 2026: what you actually pay
AI compliance cost for small teams in 2026: most 1-50 person orgs pay under $5,000 a year unless bias audits apply. Full breakdown by size.
compliancecostbudgetsmall-teams
AI Security·5 min
Read →AI Agent API Token Leak: 24-Hour Incident Response Playbook
24-hour runbook for leaked AI agent tokens: revoke, rotate, audit blast radius, and restore access before costs spiral. 7 copy-paste steps.
ai-securityincident-responseapi-tokensai-agents
Guides·10 min
Read →EU AI Act Digital Omnibus: High-Risk Deadline Extended to December 2027 (Official)
EU Digital Omnibus entered into force July 27, 2026. Annex III high-risk deadline is now December 2, 2027 -- binding law. Article 50 and GPAI still apply August 2, 2026.
eu-ai-actdigital-omnibusaugust-2026deadlines
Guides·9 min
Read →NYC Local Law 144 AI Bias Audit: Employer Guide 2026
What does the NYC Local Law 144 AI bias audit require? Independent audits, published results, candidate notice, fines to $1,500 daily. Six-step checklist.
nyclocal-law-144bias-audithiring
Guides·9 min
Read →Trump's June 2026 AI Executive Order: What Compliance Teams and Federal Contractors Must Do
Trump signed a new AI executive order on June 2, 2026. Here is what it requires, what is voluntary, who must act, and what federal contractors and compliance teams should do now.
ai-governanceexecutive-orderfederal-contractorsai-compliance
Guides·8 min
Read →AI Coding Tools Are Destroying SSDs: What Your Acceptable Use Policy Must Address
OpenAI Codex was silently writing 640 TB/year to developer SSDs through a logging bug. This is a governance gap most acceptable-use policies miss. Here is what IT and compliance teams need to add.
ai-governanceacceptable-use-policyai-coding-toolsshadow-ai
Guides·9 min
Read →Human-in-the-Loop AI: What EU AI Act Article 14 Actually Requires (Not What Vendors Say)
EU AI Act Article 14 requires real-time human intervention, not a review button. Use this 10-item checklist to test vendor human-in-the-loop claims.
eu-ai-acthuman-oversighthitlcompliance
Guides·10 min
Read →OpenAI Enterprise Privacy: What trust.openai.com Actually Covers
What trust.openai.com covers, which certs apply to each tier, and how to use the DPA to satisfy GDPR Article 28 before deploying ChatGPT Enterprise.
openaichatgptprivacygdpr
Guides·8 min
Read →Pentagon Used Grok AI to Fire 2,000 Missiles: What It Means for Enterprise AI Governance
Pentagon's Grok AI fired 2,000+ munitions at Iran in 96 hours. Does your enterprise AI governance survive the same sworn-testimony scrutiny?
ai-governanceautonomous-aihuman-oversightaccountability