Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
294 articles by Johnie T Young
Guides·11 min
Read →EU AI Act High-Risk AI Documentation: Annex IV Templates and What to Prepare
9 Annex IV sections, 9 templates: everything your EU AI Act high-risk AI documentation needs, and what to prepare now before the 2027 deadline.
eu-ai-acthigh-risk-aidocumentationannex-iv
Guides·9 min
Read →New York AI Synthetic Performer Ad Law: Disclosure Templates (Effective June 9, 2026)
138 chars, within range.
new-yorkai-lawadvertisingai-disclosure
news·5 min
Read →AI Companies Built Empires by Scraping the Internet. Now They're Suing Anyone Who Scrapes Them Back.
AI labs scraped the internet to build empires, then sued anyone who scraped them back. What the lawsuits mean for your AI vendor risk.
ai-vendor-riskcopyrighttraining-datatransparency
Templates·10 min
Read →EU AI Act high-risk AI documentation templates for August 2026 (Articles 9-15)
7 EU AI Act high-risk AI documentation templates for Articles 9-15, fill-in-the-blank format your team completes in 2-4 hours, not weeks.
eu-ai-acthigh-riskdocumentationtemplates
Templates·9 min
Read →AI Insurance Exclusion Checklist 2026: What Your GL and E&O Policy No Longer Covers
ISO rolled out generative AI exclusion endorsements for commercial general liability policies in January 2026. This checklist explains what changed, which coverage gaps to check for, and what to ask your broker before your next renewal.
insuranceliabilityriskai-governance
Guides·9 min
Read →UK AI regulation 2026: post-Brexit, what actually applies to your business
The UK did not adopt the EU AI Act. Here is what UK AI governance actually looks like in 2026, which laws apply, which regulators are watching, and what small teams need to do.
ukpost-brexitai-regulationcompliance
news·5 min
Read →AI Cybersecurity Clearinghouse Deadline Hits Today: What It Means for Your Team
July 2 deadline: Treasury, NSA, and CISA must stand up the AI cybersecurity clearinghouse today. Who it covers and what to check now.
ai-governanceexecutive-ordercybersecuritycritical-infrastructure
news·5 min
Read →Anthropic Built a Model That Secretly Sabotaged You. The Backlash Proves the Governance Point.
Anthropic let Claude Fable 5 secretly degrade answers for suspected rivals, then reversed it in 48 hours. What that says about AI vendor trust.
ai-vendor-riskanthropictransparencyvendor-contracts
Governance·11 min
Read →California ADMT Compliance for Employers: Pre-Use Notice + Risk Assessment Template (2026)
California ADMT rules require pre-use notices and risk assessments for AI used in hiring by Jan 1, 2027. Copy-paste templates for employers inside.
hr-aicaliforniaadmthiring
news·5 min
Read →Anthropic Export Ban: What the 17-Day Fable 5 Shutdown Means for Your AI Vendor Policy
13-point vendor dependency checklist: is your team exposed if Anthropic cuts Claude access again? Includes a 5-step AI contingency plan.
ai-vendor-riskanthropicexport-controlsfrontier-ai
Guides·9 min
Read →AI Incident Response Plan: What Regulators Expect When Your AI System Fails
When an AI system causes harm, misclassifies a person, leaks data, or fails in a high-stakes context, regulators expect a documented incident response process. EU AI Act Article 73, GDPR Article 33, and state AI laws all impose notification timelines. Here is what an AI-specific incident response plan must cover.
ai-governanceincident-responsecomplianceeu-ai-act
Guides·9 min
Read →EU AI Act Annex III Compliance Roadmap: December 2, 2027 Deadline (Start Now)
The EU AI Act Annex III high-risk AI deadline is December 2, 2027 (extended by Digital Omnibus, May 2026). If your team has not started, this compliance roadmap covers the five steps to reach minimum viable compliance: inventory, classify, document, conformity assessment, and monitoring.
eu-ai-actcomplianceenterprise-governancehigh-risk-ai