Loading…
Loading…

AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
219 articles by Johnie T Young
Washington's AI likeness and deepfake law takes effect June 10, 2026. Signed by Governor Ferguson. What is prohibited, who is liable, and what to check in your tech stack before the deadline.
EU Digital Omnibus agreement confirmed May 7, 2026: Annex III (high-risk AI) deadline moves to December 2, 2027. GPAI enforcement unchanged. 6-point action checklist for compliance teams.
12 AI vendor contract clauses to add, fix, or reject before signing. Copy-paste redline language for: no training on your data, 72-hour breach notification, data deletion, sub-processor limits, audit rights, and model version control.
Side-by-side comparison of Anthropic and OpenAI GDPR terms: DPA availability, data retention, EU hosting, sub-processors, breach notification, and training data opt-out. Which is safer for EU personal data?
A U.S. District Court for the District of Colorado suspended enforcement of SB 24-205 on April 27, 2026. What the order actually says, what's still in effect, and what your team should do now.
EU Digital Omnibus agreement confirmed May 7, 2026: EU AI Act Annex III deadline moves to December 2, 2027. What changes, what stays in force (GPAI enforcement August 2, 2026), and 6-point action checklist.
Fill-in-the-blanks AI acceptable use policy template for small teams. Copy the policy, replace 5 bracketed fields, and you have a compliant AI use policy covering approved tools, prohibited uses, data rules, and human oversight in under 30 minutes.
AI vendor DPA tracker: 25+ tools in one table with GDPR DPA availability, training opt-out status, EU data residency, and direct DPA request links. Free to copy. Updated May 2026.
GitHub Copilot vs Cursor vs Claude Code governance: which trains on your code, which tiers include DPAs, IP indemnification comparison, and a copy-paste acceptable use policy for dev teams. 2026 edition.
EU AI Act August 2, 2026 deadline: 72 days left. Checklist for high-risk AI deployers, conformity assessment, risk management system, technical documentation, EU AI database registration, and human oversight. GPAI deadline is the same date and was NOT extended.
Administrative monetary penalties are reshaping data protection enforcement, giving small teams clearer risk signals and practical compliance steps to stay
A complete AI acceptable use policy template for teams of 5-50. Covers approved tools, prohibited uses, data classification, incident reporting, and employee acknowledgment. Copy into your team wiki.