Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
371 articles by Johnie T Young
Guides·10 min
Read →AI governance for legal teams and general counsel: privilege, confidentiality, and risk 2026
AI governance for legal teams and general counsel: check these 3 2026 risks before privilege waiver, ethics violations, or sanctions hit your firm.
legal-aiattorney-client-privilegeai-governancelegal-compliance
Governance·10 min
Read →Amazon KiroRank and Tokenmaxxing: How to Measure AI Adoption Without Creating Perverse Incentives
Amazon scrapped KiroRank after staff gamed it with tokenmaxxing. Build AI adoption metrics that reward outcomes, not fake usage volume.
ai-governanceai-adoptionai-metricsengineering
Guides·10 min
Read →BIPA and facial recognition AI: compliance guide for employers and developers 2026
Which AI tools trigger BIPA in 2026? Facial recognition, voice, and video-interview tools need written consent, a retention schedule, and a no-sale rule.
bipabiometric-privacyfacial-recognitionai-governance
Guides·10 min
Read →Colorado AI Act Overhaul: What Employers Must Know About SB 26-189 Before January 1, 2027
Colorado replaced its original AI Act with SB 26-189, signed May 14, 2026. The new law drops bias audits and impact assessments in favor of a lighter notice-and-transparency framework. Effective January 1, 2027, it requires pre-use notice, post-adverse-action notice within 30 days, and 3-year recordkeeping for any employer using AI in hiring, promotions, or terminations.
colorado-ai-lawai-hiringemployment-lawcompliance
Governance·10 min
Read →Miasma Worm and Phantom Gyp: The npm Supply Chain Attack That Bypasses Security Tools (June 2026)
A self-spreading worm compromised 57 npm packages in under 2 hours using binding.gyp instead of postinstall scripts, bypassing security scanners. What it means for teams that run npm install, and the 5 controls that limit your exposure.
ai-securitysupply-chainnpmdeveloper-tools
Governance·10 min
Read →AI Support Chatbots with Account Actions Are a Security Risk: The Meta Instagram Incident and What Your Team Must Govern (2026)
Hackers social-engineered Meta AI into resetting passwords on high-profile Instagram accounts by simply asking. What the attack means for any team deploying an AI chatbot that can take account actions, and the 6 controls that prevent it.
ai-securityai-governancechatbotprompt-injection
Guides·9 min
Read →EU AI Act August 2026: What's Delayed and What Still Applies
EU AI Act Omnibus confirmed June 29, 2026 -- standalone high-risk to Dec 2, 2027, embedded products to Aug 2, 2028. Article 50 still applies Aug 2, 2026.
eu-ai-actcompliancedeadlineai-regulation
Governance·10 min
Read →Reviewing AI-Generated Pull Requests: A Review Policy and 9-Point Checklist (2026)
Reviewing AI-generated pull requests? Follow this 9-point checklist for who signs off, what to require, and where AI code fails review.
ai-governancecode-reviewai-codingengineering
Governance·11 min
Read →AI Spend Governance: 5 Token Budget Controls That Stop Runaway AI Bills (2026)
5 token budget controls to stop runaway AI bills. Copy-paste usage caps, alerts, per-seat limits, and a kill switch for AI spend governance.
ai-governanceai-costtoken-billingfinops
Guides·10 min
Read →Who Owns AI-Generated Content? Copyright Rules Your Business Needs to Know (2026)
Generative AI copyright ownership 2026: raw AI output isn't protectable, but your edits and prompts often are. Here's how to document and protect them.
copyrightintellectual-propertygenerative-aiai-governance
Governance·9 min
Read →Vetting AI Tools: How to Avoid Fake AI Apps and Malware (7-Step Check, 2026)
Fake AI apps and malware sites now outrank the real download on Google. Run this 7-step check for vetting AI tools before your team installs anything.
ai-governanceshadow-aisecurityvendor-risk
Guides·11 min
Read →Agentic AI Liability: Who Is Responsible When Your AI Agent Makes a Mistake? (2026)
Agentic AI liability 2026 -- who's responsible when your AI agent sends a wrong email or deletes data? You are, not the AI. What to check before deploying.
ai-agentsliabilitylegalgovernance