Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
322 articles by Johnie T Young
Compliance·16 min
Read →EU AI Act Compliance for Small Teams: The Complete Guide (2026)
EU AI Act compliance small teams -- high-risk deadline moved to Dec 2, 2027; GPAI rules still enforce Aug 2, 2026. Classify your AI use case now.
eu-ai-actcomplianceai-governancesmall-teams
Compliance·10 min
Read →Fintech AI Governance: CFPB, FCRA, and EU AI Act Requirements for Automated Credit Decisions (2026)
AI credit and lending decisions trigger CFPB adverse action notice requirements, FCRA accuracy obligations, and EU AI Act high-risk classification. Templates and compliance steps.
fintech-aicfpbfcraeu-ai-act
Governance·10 min
Read →HR AI Governance: What EU AI Act and EEOC Require for AI Hiring Tools (2026)
HR AI governance for hiring decisions: EU AI Act high-risk rules hit by Dec 2027, EEOC bars disparate impact. Assessments, bias tests, disclosure required.
hr-aiai-governanceeu-ai-acthiring
Compliance·16 min
Read →5 AI APIs That Don't Train on Your Data: GDPR & CCPA Guide 2026
5 AI APIs that don't train on your data: Claude, Azure OpenAI, Vertex AI, Mistral, OpenAI API. DPA links, EU data residency, zero-retention configs included.
ai-privacygdprccpaai-apis
Security·14 min
Read →TypeScript AI Agent Security: 4 Incident Response Modules (2026)
4 TypeScript modules for AI agent security: injection guard, circuit breaker, audit logger, tool auth gate. Drop into Express or Next.js. Vitest tested.
ai-securitytypescriptincident-responseai-agents
Governance·12 min
Read →New Federal & State Rules Challenge Health Data Security
Small health‑care teams face a growing maze of federal and state national security rules that tighten health data security, demanding compliance strategies
health data securitynational security regulationshealthcare compliancegenomic data protection
Governance·13 min
Read →DOJ Bulk Data Rule Tightens Health Data Security for Teams
DOJ's Bulk Data Rule compels small health teams to keep data in the US, ban foreign tools, and enforce health data security as security laws tighten.
health datanational securitycompliancesmall teams
Governance·8 min
Read →AI Vendor Supply Chain Security: Checklist for Small Teams (2026)
AI supply chain attacks: contractor gets infected, tokens stolen, your systems hit. Checklist to map vendor exposure, scope access, and respond within 24 hours.
ai-securityvendor-risksupply-chainincident-response
Governance·8 min
Read →AI in Virtual Data Rooms: Compliance and Governance Guide (2026)
AI features in VDRs create data handling and compliance obligations. Access controls, training opt-outs, and audit log requirements before enabling VDR AI.
vendor-riskdue-diligenceai-compliancegovernance
Governance·9 min
Read →AI Vendor Due Diligence Checklist (2026): 30 Questions Before You Sign
30-question AI vendor due diligence checklist: security, data handling, compliance, and contract terms. Pass/fail criteria for each. Copy into your review.
vendor-riskdue-diligencechecklistai-security
Governance·16 min
Read →Amazon KDP AI Disclosure: Exact Checkbox Wording, Policy & Decision Flowchart (2026)
Which box do you check? Copy the exact Amazon KDP AI disclosure wording for text, images, and translations, plus a 3-question decision flowchart.
ai-complianceamazon-kdpai-disclosuregovernance
Governance·8 min
Read →GitHub Copilot and AI Code Assistants: Governance and IP Risk (2026)
Copilot and Cursor send source code to vendor servers. IP risk, licensing exposure, and the org settings and policy rules engineering teams need to govern this.
ai-securitygovernanceai-complianceip-risk