Johnie T Young
Governance & Regulation Desk
Johnie T Young is the byline of the governance and regulation desk at AI Policy Desk. The desk covers new AI laws, regulator orders, court rulings and the decisions a small team has to make because of them: the EU AI Act, US state statutes, FTC and state attorney general actions, privacy rules for AI tools. A post under this name starts from the primary document (the statute text, the agency order, the vendor's terms) and a source log where every number, date and name has a row with a quoted passage. The desk says which clause or paragraph it relied on, says what it could not read, and gives an opinion with the reason behind it. Posts that change after publication show an Updated date, and a Last reviewed date when the facts were rechecked.
- Starts from the statute or order
- Every fact traced to a source row
- Dated checks on each post
325 articles by Johnie T Young
HTI-5 Drops AI Model Cards: 31 Questions for Your EHR Vendor
HTI-5 ends the AI model card rule for certified EHRs on Dec 28, 2026. The 31 fields it deletes, the bias duty that stays, and how to keep both in a contract.
EN 18286 Harmonised Standard: What It Covers, Free Copies
EN 18286 became the AI Act's first harmonised standard on Oct 14. What its presumption covers, what it leaves out, and where to read it free, not for £322.
California AB 1979: Health Chatbots Come Under the CMIA
From January 1, 2027, a business that offers a health chatbot to Californians is a provider of health care under the CMIA. The test, the fines and the fixes.
AI Regulation and Policy Changes, October 2026: What's Due
25 AI policy and regulation changes from October 2026, each linked to the official text: the four that bind companies and the comment deadlines still open.
TRAI Draft AI Guidelines: What Telecom Vendors Must Provide
TRAI's October 30 draft makes Indian telecom operators inventory, risk-rate and report AI incidents. What vendors will be asked for; comments close Nov 27.
Elvis Presley Anthropic Lawsuit: A Lyrics Data Checklist
Elvis Presley's rights holders sued Anthropic on Oct 23 over 274 songs. What the complaint alleges, and a lyrics and dataset audit for teams that build on AI.
Poland AI Act Enforcement: What KRiBSI Can Do From Oct 28
Poland's AI regulator KRiBSI met for the first time on Oct 28, the day its powers to inspect, take complaints and fine under the EU AI Act took effect.
New York AI Chatbot Law: What S.9051B Bans From 2027
Hochul signed S.9051B Oct 28. From Jan 1, 2027, chatbots can't flatter, opine or recall personal details for New York users not age-checked as adults.
AI Scribe Privacy: What Canada's Privacy Regulators Expect
Canada's privacy regulators published a joint resolution on AI in health on Oct 29. What clinics and AI scribe vendors should change before a complaint.
Outlier AI Privacy: noyb's GDPR Complaints Against Scale AI
noyb filed 5 GDPR complaints against Scale AI's Outlier on Oct 27: trackers, repeated face checks, unanswered access requests. What to check in your own setup.
ARTEX AI Hacking Arrests in Korea: Extortion Playbook
Seoul police arrested 7 over AI-assisted hacks of 90 firms. 75 victims never reported. Six steps for a small team that gets the extortion email.
Anthropic S-1 and FTC Probe: 5 Risks for Claude Customers
Anthropic's S-1 confirms an FTC civil investigative demand and names risks Claude customers carry: usage policy cutoffs, ZDR limits and government restrictions.