Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
294 articles by Johnie T Young
Guides·10 min
Read →AI Meeting Transcription Apps: The Data Risks Your Team May Not Know About
Does GDPR apply to AI meeting transcription tools? 8 apps compared for data privacy compliance, retention risk, and transfer rules.
shadow-aiai-privacygdprcompliance
Guides·8 min
Read →Amazon KDP AI Book Surge: What the Tripling of AI Content Means for Disclosure Enforcement
Monthly new e-book releases on KDP nearly tripled between 2022 and 2025 as AI-generated content flooded the platform. Amazon has responded with account-level enforcement for undisclosed AI content. Here is what publishers and authors need to document before enforcement tightens further.
amazon-kdpai-disclosureai-compliancepublishing
Guides·9 min
Read →Human-in-the-Loop AI: What EU AI Act Article 14 Actually Requires (Not What Vendors Say)
EU AI Act Article 14 sets specific technical and operational requirements for human oversight of high-risk AI; most vendor "human-in-the-loop" claims don't satisfy them. Here is what effective oversight actually means, how to evaluate vendor implementations, and a 10-item compliance checklist for deployers.
eu-ai-acthuman-oversighthitlcompliance
Guides·10 min
Read →OpenAI Enterprise Privacy: What trust.openai.com Actually Covers
What trust.openai.com covers, which certs apply to each tier, and how to use the DPA to satisfy GDPR Article 28 before deploying ChatGPT Enterprise.
openaichatgptprivacygdpr
Guides·8 min
Read →Pentagon Used Grok AI to Fire 2,000 Missiles: What It Means for Enterprise AI Governance
Cameron Stanley, the Pentagon's chief AI officer, confirmed in sworn court testimony that Grok Gov helped fire more than 2,000 munitions at Iran in 96 hours. What every enterprise AI governance team should learn from the scrutiny that followed.
ai-governanceautonomous-aihuman-oversightaccountability
Guides·8 min
Read →AI Workforce Displacement and the WARN Act: What HR and Legal Teams Need to Know in 2026
AI-driven job displacement is no longer theoretical. WARN Act obligations apply when AI automation causes qualifying mass layoffs, and state laws are adding AI-specific notice requirements on top of the federal baseline. Here is a practical guide for HR and legal teams navigating AI displacement governance in 2026.
workforcehr-complianceai-governanceemployment-law
Guides·9 min
Read →CCPA and AI in 2026: What California's Privacy Law Requires for AI Tools
Using AI tools with California user data means CCPA obligations apply. This guide covers what counts as sharing under CPRA, the CPPA's finalized automated decision-making rules, training data obligations, and a 12-item compliance checklist for small teams.
ccpaprivacycaliforniaai-governance
Guides·10 min
Read →EU AI Act Compliance Checklist 2026: 35 Items for Providers and Deployers
Track all 35 EU AI Act compliance checklist obligations: 15 for providers, 10 for deployers, 10 shared. High-risk AI (Annex III) deadline: December 2, 2027 (extended by EU Digital Omnibus).
eu-ai-actcompliancechecklistenterprise-governance
Templates·9 min
Read →AI Project Intake Checklist: 6-Phase Workflow for Approving New AI Tools
Run new AI tools through this 6-phase AI project intake checklist before deployment: business case, risk, security, legal, rollout, and monitoring.
ai-governancecompliancetemplatesshadow-ai
Guides·9 min
Read →Great American AI Act 2026: What the Obernolte-Trahan Bipartisan Draft Means for Enterprise Compliance
On June 4, 2026, Representatives Obernolte and Trahan released a bipartisan discussion draft of the Great American AI Act. It defines "large frontier developers" as companies with $500M+ revenue, proposes a 3-year preemption of state AI development laws, and creates mandatory third-party audits and whistleblower protections. Here is what the draft says and what it means before it becomes law.
frontier-aiai-policyus-regulationcompliance
Guides·8 min
Read →Anthropic CEO Proposes AI Tax for Universal Income. Sanders Introduced a Bill. What It Means for Enterprise Governance.
On June 10-11, 2026, Anthropic announced a $200M research program on AI economic impact and Dario Amodei proposed taxing AI companies to fund universal basic income. On June 18, Senator Sanders introduced a sovereign wealth fund bill targeting AI firms. Here is what the governance signal means for enterprise teams.
frontier-aiai-policyworkforcecompliance
Guides·9 min
Read →AI Medical Malpractice 2026: Who Is Liable When a Diagnostic AI Gets It Wrong?
Malpractice claims involving AI tools rose 14% between 2022 and 2024, with most in radiology, cardiology, and oncology. When an AI diagnostic recommendation leads to patient harm, liability may fall on the AI developer (product liability), the hospital (negligent implementation), or the physician (failure to exercise independent judgment). Here is how courts and state laws are distributing that risk.
healthcare-aimalpracticeliabilityai-governance