Loading…
Loading…

AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
219 articles by Johnie T Young
Colorado SB 189 was signed May 14, 2026, replacing SB 24-205 with a narrower automated decision-making framework. Effective date is now January 1, 2027. Here is what changed, what the new requirements are, and the 5-step preparation checklist for Colorado employers.
Article 50 compliance checklist: chatbot disclosure by August 2, 2026. AI content labeling and deepfake marking delayed to December 2, 2026 (EU Digital Omnibus). Who it applies to, C2PA watermarking standards, 8-step checklist.
The EU AI Act Code of Practice for general-purpose AI providers finalized in June 2026. Here is what changed from the April draft, what obligations are now locked in, and the 7-step action checklist for GPAI providers before the August 2, 2026 enforcement date.
Illinois law requires employers to notify candidates before using AI to analyze video interviews, give an opt-out option, and disclose which characteristics the AI evaluates. In effect since January 1, 2026. Here is the 6-step compliance checklist and sample consent language.
Model Context Protocol (MCP) servers give AI agents access to your filesystem, databases, and APIs. Here are the 5 attack vectors, 12-point governance checklist, and access scope framework every engineering team should implement before deploying agents with MCP.
Every major AI regulation deadline in 2026 and 2027 in one place, EU AI Act, US state laws, FTC enforcement, SEC requirements, HIPAA AI guidance, and international. Updated monthly.
GPAI provider under the EU AI Act? 8 yes/no questions to find your classification and the obligations you must meet before August 2, 2026. Covers model size, EU market access, and systemic risk.
AI governance RACI template for small teams: assign Responsible, Accountable, Consulted, and Informed roles across 12 activities, tool approval, policy review, incident response, and vendor management. Copy-paste into a spreadsheet.
A 15-metric dashboard for measuring AI governance effectiveness on small teams, what to track, how to measure it, when to escalate, and review cadence. No enterprise budget required.
Four US states now regulate AI in hiring decisions. NYC Local Law 144 requires annual bias audits. Illinois HB 3773 requires consent before AI video interview analysis. Connecticut CART Act takes effect October 1, 2026. Colorado ADMT framework: January 1, 2027. State-by-state compliance matrix.
Copy-paste AI incident response plan template: 5 phases, role assignments, notification checklist, and timeline. Built for teams without a dedicated security or compliance function.
133 days until Connecticut SB 5 takes effect October 1, 2026. 10-step employer checklist: AEDT disclosure notices, bias audit requirements, anti-discrimination policy, and whistleblower protections. Who must comply and by when.