Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
371 articles by Johnie T Young
Governance·18 min
Read →AI Governance for Small Teams: The Complete Guide (2026)
What does AI governance for small teams require? 5 things: policy, risk assessment, vendor vetting, monitoring, and sector-specific rules.
ai-governancecompliancepolicyrisk-assessment
Compliance·16 min
Read →EU AI Act Compliance for Small Teams: The Complete Guide (2026)
EU AI Act compliance small teams -- high-risk deadline moved to Dec 2, 2027; GPAI rules still enforce Aug 2, 2026. Classify your AI use case now.
eu-ai-actcomplianceai-governancesmall-teams
Compliance·10 min
Read →Fintech AI Governance: CFPB, FCRA, and EU AI Act Requirements for Automated Credit Decisions (2026)
What must fintechs disclose when AI denies credit? CFPB adverse action rules, FCRA accuracy duties, and EU AI Act high-risk steps, plus templates.
fintech-aicfpbfcraeu-ai-act
Governance·10 min
Read →HR AI Governance: What EU AI Act and EEOC Require for AI Hiring Tools (2026)
HR AI governance for hiring decisions: EU AI Act high-risk rules hit by Dec 2027, EEOC bars disparate impact. Assessments, bias tests, disclosure required.
hr-aiai-governanceeu-ai-acthiring
Compliance·16 min
Read →5 AI APIs That Don't Train on Your Data: GDPR & CCPA Guide 2026
5 AI APIs that don't train on your data: Claude, Azure OpenAI, Vertex AI, Mistral, OpenAI API. DPA links, EU data residency, zero-retention configs included.
ai-privacygdprccpaai-apis
Security·14 min
Read →TypeScript AI Agent Security Incident Response Playbook (2026)
TypeScript AI agent security playbook: 4 drop-in modules (injection guard, circuit breaker, audit logger, tool auth). Under 80 lines each, Vitest tested.
ai-securitytypescriptincident-responseai-agents
Governance·12 min
Read →New Federal & State Rules Challenge Health Data Security
Small health‑care teams face a growing maze of federal and state national security rules that tighten health data security, demanding compliance strategies
health data securitynational security regulationshealthcare compliancegenomic data protection
Governance·13 min
Read →DOJ Bulk Data Rule Tightens Health Data Security for Teams
DOJ's Bulk Data Rule compels small health teams to keep data in the US, ban foreign tools, and enforce health data security as security laws tighten.
health datanational securitycompliancesmall teams
Governance·8 min
Read →AI Vendor Supply Chain Security: Checklist for Small Teams (2026)
Respond within 24 hours: AI vendor supply chain security checklist to map exposure, scope access, and contain a contractor breach like Vercel's.
ai-securityvendor-risksupply-chainincident-response
Governance·8 min
Read →AI in Virtual Data Rooms: Compliance and Governance Guide (2026)
AI features in VDRs create data handling and compliance obligations. Access controls, training opt-outs, and audit log requirements before enabling VDR AI.
vendor-riskdue-diligenceai-compliancegovernance
Governance·9 min
Read →AI Vendor Due Diligence Checklist (2026): 30 Questions Before You Sign
30-question AI vendor due diligence checklist: security, data handling, compliance, and contract terms. Pass/fail criteria for each. Copy into your review.
vendor-riskdue-diligencechecklistai-security
Governance·16 min
Read →Amazon KDP AI Disclosure: Exact Checkbox Wording, Policy & Decision Flowchart (2026)
Which box do you check? Copy the exact Amazon KDP AI disclosure wording for text, images, and translations, plus a 3-question decision flowchart.
ai-complianceamazon-kdpai-disclosuregovernance