Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
294 articles by Johnie T Young
news·5 min
Read →Connecticut Data Privacy Law Expands July 1: Lower Threshold Catches More Small Teams
Connecticut's SB 4 (Public Act 26-64) takes effect July 1, 2026, dropping the CTDPA coverage threshold from 100,000 to 35,000 consumers and adding two new no-threshold triggers. Here is what small teams need to check today.
data-privacyconnecticutctdpastate-ai-law
guides·5 min
Read →Does Your AI Vendor Train on Your Business Data? 11 Vendors Compared (2026 Policy Guide)
11 AI vendors compared: which ones train on your business data in 2026? See opt-out steps for ChatGPT, Copilot, and Atlassian's August deadline.
ai-data-privacyvendor-policygdprtraining-data
news·5 min
Read →Russia's Project 2026 Targets AI Training Data: 6-Point Vendor Risk Checklist for Small Teams
6 vendor risk checklist questions for small teams after Russia's SDA leaked plans to poison AI training data at scale. Bloomberg's June 2026 report.
ai-vendor-riskai-governancecybersecuritydisinformation
news·5 min
Read →GPT-5.6 Stagger: 5 AI Procurement Policy Updates Compliance Teams Need After the White House Intervened
The White House asked OpenAI to stagger GPT-5.6 access customer by customer in June 2026, a first for preemptive US government AI model restrictions. Here are 5 procurement policy updates compliance teams should make now.
ai-governancefrontier-aiopenaigovernment-regulation
Templates·9 min
Read →AI compliance checklist by team size: Tier 1 (1-10), Tier 2 (11-50), Tier 3 (51-200)
Need an AI compliance checklist by team size? Use 3 tiers (1-10, 11-50, 51-200) with clear triggers for when to add vendor and incident response steps.
compliancechecklisttemplatessmall-teams
Guides·8 min
Read →AI compliance cost for small teams 2026: what you actually pay
AI compliance cost for small teams in 2026: most 1-50 person orgs pay under $5,000 a year unless bias audits apply. Full breakdown by size.
compliancecostbudgetsmall-teams
AI Security·5 min
Read →AI Agent API Token Leak: 24-Hour Incident Response Playbook
24-hour runbook for leaked AI agent tokens: revoke, rotate, audit blast radius, and restore access before costs spiral. 7 copy-paste steps.
ai-securityincident-responseapi-tokensai-agents
Guides·10 min
Read →EU AI Act Digital Omnibus August 2026: will the deadline hold?
EU AI Act Digital Omnibus August 2026: will the deadline hold, or does high-risk delay to December 2027 need formal adoption first?
eu-ai-actdigital-omnibusaugust-2026deadlines
Guides·8 min
Read →AI Coding Tools Are Destroying SSDs: What Your Acceptable Use Policy Must Address
OpenAI Codex was silently writing 640 TB/year to developer SSDs through a logging bug. This is a governance gap most acceptable-use policies miss. Here is what IT and compliance teams need to add.
ai-governanceacceptable-use-policyai-coding-toolsshadow-ai
Guides·9 min
Read →NYC Local Law 144 AI Bias Audit: Employer Guide 2026
NYC Local Law 144 requires employers using AI hiring tools to conduct annual independent bias audits, publish results, and notify candidates. DCWP enforcement began July 5, 2023. Penalties run $500 to $1,500 per violation, with each day of use and each missed notice counted separately. Six-step compliance checklist.
nyclocal-law-144bias-audithiring
Guides·9 min
Read →Trump's June 2026 AI Executive Order: What Compliance Teams and Federal Contractors Must Do
Trump signed a new AI executive order on June 2, 2026. Here is what it requires, what is voluntary, who must act, and what federal contractors and compliance teams should do now.
ai-governanceexecutive-orderfederal-contractorsai-compliance
Guides·11 min
Read →AI Browser Agents (Atlas, Comet): 7-Point Governance Policy for Small Teams (2026)
ChatGPT Atlas and Perplexity Comet act inside your logged-in sessions, which breaks the old browser security model. Here is a copy-paste governance policy for teams of 5-50, plus the prompt-injection risk you need to brief staff on now.
ai-agentsai-browserprompt-injectionai-security