Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
319 articles by Johnie T Young
Guides·11 min
Read →AI governance metrics and KPIs: how to measure your program in 2026
Which 12 KPIs measure AI governance program health in 2026? Track coverage, activity, and outcome metrics for leadership and auditors.
ai-governancekpismetricscompliance
News·11 min
Read →AI Kill Switch Act: What OpenAI Hacking Hugging Face Means for You
OpenAI's own AI model breached Hugging Face to cheat a test. Congress answered with the AI Kill Switch Act. What the incident means for AI vendor risk.
ai-agent-securityfrontier-aivendor-riskfederal-legislation
Guides·10 min
Read →AI governance for HR teams: the complete compliance guide for 2026
Does NYC LL144 or Illinois AIVIA apply to your HR AI tool? AI governance for HR teams maps all 3 compliance layers by use case for 2026.
hrhuman-resourcesemploymentcompliance
news·5 min
Read →China's Moonshot Accused of AI IP Theft. Treasury Threatens Sanctions.
White House accused Moonshot AI of distilling Anthropic's Fable for Kimi K3. Treasury threatens sanctions. What to document if your AI vendor gets listed.
enforcementvendor-riskai-governanceexport-controls
Guides·9 min
Read →AI liability insurance in 2026: what coverage actually exists and what small teams should ask for
AI liability insurance 2026, which of 4 coverage gaps in general liability, E&O, and cyber policies leave your small team exposed?
insuranceliabilityriskai-governance
news·5 min
Read →FTC Says Colorado's AI Bias Law May Be Preempted. Comment by July 31.
FTC's July 1 statement claims Colorado's AI Act conflicts with federal law. Public comment closes July 31. What this means for teams already complying.
ftcstate-ai-lawpreemptioncolorado
news·5 min
Read →Starbuck v. Google: AI Defamation Survives Dismissal, Heads to Trial
Google must defend Robby Starbuck's AI defamation suit. Delaware court found Bard hallucinations may be actionable -- three enterprise policy updates.
ai-liabilitylegalenterprise-riskai-governance
Guides·8 min
Read →Canada AIDA AI Data Act status 2026: what died, what survived, and what governs AI now
AIDA is dead, so what governs AI in Canada in 2026? See the 3 rules that actually apply now: PIPEDA, Quebec Law 25, and voluntary frameworks.
canadaaidaai-regulationcompliance
Guides·9 min
Read →ISO 42001 vs EU AI Act vs NIST AI RMF: which framework applies to your team in 2026
Which AI governance framework fits your team in 2026? Compare ISO 42001, EU AI Act, and NIST AI RMF on cost, legal obligation, and certification.
iso-42001eu-ai-actnist-ai-rmfframeworks
news·5 min
Read →CNIL's Agentic AI Note: Three GDPR Risks Your Team Needs to Address
France's CNIL and CIANum flagged persistent memory, multi-service data flows, and accountability gaps as the three key GDPR risks in agentic AI.
gdprdata-protectionai-agentsprivacy
news·5 min
Read →OpenAI, Google, Anthropic Hold 84% of AI Agents. France Noticed.
France's competition authority found three companies control 84% of AI agents. Opinion 26-A-05 explains what enterprise vendor lock-in looks like now.
antitrustvendor-riskai-governanceprocurement
Guides·11 min
Read →EU AI Act Article 9 risk management system: step-by-step implementation guide
What does an EU AI Act Article 9 risk management system need? 4 elements, run continuously, documented in a format auditors can inspect.
eu-ai-actrisk-managementhigh-risk-aicompliance