Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
294 articles by Johnie T Young
Guides·9 min
Read →Clinical AI Decision Support 2026: FDA January Guidance, Non-Device CDS Criteria, and Human Oversight Requirements
FDA issued updated Clinical Decision Support guidance on January 6, 2026, replacing the 2022 version. It clarifies which AI tools qualify as Non-Device CDS exempt from medical device regulation and which cross the line into regulated SaMD. Key change: enforcement discretion for singular-output CDS. Here is what the four-factor test means in practice.
healthcare-aifdaclinical-decision-supportcompliance
Guides·10 min
Read →FDA AI Medical Device Compliance 2026: SaMD Classification, 510(k), and Predetermined Change Control Plans
FDA has authorized more than 1,350 AI-enabled medical devices as of early 2026. The framework covers classification (Class I, II, III), the 510(k) vs PMA pathway, Good Machine Learning Practices, and Predetermined Change Control Plans for AI systems that update after clearance. A compliance guide for healthcare AI developers and deployers.
fdasamdhealthcare-aimedical-device
Guides·8 min
Read →HIPAA and AI Vendors 2026: Which Tools Require a Business Associate Agreement (and What That Actually Covers)
ChatGPT Enterprise can sign a HIPAA BAA. ChatGPT Health cannot. Claude API can. Microsoft Copilot for Healthcare can. Getting this wrong is a reportable breach under HIPAA regardless of whether data leaked. A plain-English guide to BAA requirements for AI tools used in healthcare workflows.
hipaahealthcare-aicomplianceai-vendors
Guides·9 min
Read →Midjourney's 60-Second Body Scanner Claims to Beat MRI. Here's What FDA Clearance Actually Requires.
Midjourney announced a full-body ultrasonic scanner in June 2026, 60x faster and 10x cheaper than MRI, it claims. But it deliberately avoids diagnostic claims because those trigger FDA medical device clearance. Here is what the SaMD pathway requires, why the regulatory gate exists, and what it means for every team using AI tools that touch patient data.
healthcare-aifdamedical-deviceai-governance
Guides·9 min
Read →FCRA and AI Hiring: The Disclosure Requirement Most Companies Are Missing (2026)
FCRA AI hiring disclosure requirements: written notice, authorization, and adverse action notices, three steps most AI screening tools skip.
fcraai-hiringemployment-lawdisclosure
Guides·9 min
Read →Pentagon Used Grok AI to Help Target 2,000 Iranian Sites in 96 Hours: What the Gillibrand Bill Means for AI Oversight Policies
A DOJ court filing on June 15, 2026 disclosed that the Pentagon used Grok AI in Operation Epic Fury to help coordinate strikes on 2,000 Iranian targets in 96 hours. Sen. Gillibrand responded with the Secure and Accountable Military AI Act: mandatory human approval gates, 15-day Congressional notice, and 72-hour incident reporting from AI contractors. Five-step audit for your AI oversight policy.
ai-governanceai-safetyfrontier-aihuman-oversight
Guides·11 min
Read →Governing Unattended AI Coding Agents: A Small-Team Policy for Background and Overnight Agents (2026)
5 controls to govern AI agents that open PRs while you sleep. Copy this unattended AI coding agent governance policy with merge gates and a kill switch.
ai-agentsai-governanceai-policyai-security
Guides·9 min
Read →Dario Amodei AI Regulation Proposals June 2026: Binding Rules, a Jobs Tax, and What Your Team Should Watch
Anthropic CEO Dario Amodei published "Policy on the AI Exponential" in June 2026, calling for mandatory third-party safety testing of frontier AI, pro-employment retention incentives, and UBI funded by an AI company tax. What the five-pillar agenda means for teams using AI today.
ai-regulationai-governancelabor-policyfrontier-ai
Guides·10 min
Read →EU Product Liability Directive and AI: What Deployers Must Know Before December 2026
The revised EU Product Liability Directive takes effect December 9, 2026, and treats software and AI systems as "products" subject to strict liability. AI deployers, not just developers, can face liability claims when AI outputs cause damage. What this means, who is exposed, and what governance controls reduce your risk.
ai-liabilityeu-ai-regulationproduct-liabilityai-governance
Guides·9 min
Read →German Court Rules Google Liable for False AI Overviews: What AI Deployers Need to Know
A Munich court ruled May 28, 2026 that Google is directly liable for defamatory false claims generated by AI Overviews, stripping platform immunity because AI search summaries are an "additional function," not infrastructure. First ruling to hold an AI company liable for AI-generated speech. What it means for teams deploying AI that makes claims about people or businesses.
ai-liabilityai-governanceeu-ai-regulationcontent-liability
Guides·11 min
Read →The Workday AI Lawsuit: What HR Teams Using AI Screening Must Do Now
The Workday AI lawsuit means your AI hiring vendor can face discrimination liability. June 22, 2026 FEHA ruling extends exposure to California state law.
ai-hiringemployment-lawai-governancehr
Templates·9 min
Read →BIPA AI Hiring Compliance Checklist for Illinois Employers (2026)
Illinois BIPA requires written consent, a public retention policy, and destruction schedules before collecting any biometric data, including AI-generated facial geometry and voice prints. Use this checklist to verify your hiring process is compliant.
bipaillinoisbiometric-dataai-hiring