Loading…
Johnie T Young
AI Expert
Johnie T Young is an AI expert and governance practitioner with deep experience helping fast-moving technology companies implement responsible AI practices at small-team scale. With a focus on practical, actionable frameworks, Johnie built AI Policy Desk to close the gap between enterprise-grade compliance tooling and the real-world needs of lean product teams. Before founding AI Policy Desk, Johnie worked across a range of technology companies advising on AI risk management, GDPR readiness, and EU AI Act compliance. With the rapid emergence of AI regulation globally, Johnie identified a clear need: governance resources written for 10-person teams, not Fortune 500 legal departments — practical templates, checklists, and guides that teams can pick up and use today.
- AI governance practitioner
- EU AI Act and GDPR specialist
- AI risk management expert
- Compliance frameworks for small teams
EU AI Act complianceAI governance frameworksGDPRRisk assessmentShadow AI managementVendor evaluationAI incident responseModel risk management
322 articles by Johnie T Young
Guides·8 min
Read →Pentagon Used Grok AI to Fire 2,000 Missiles: What It Means for Enterprise AI Governance
Cameron Stanley, the Pentagon's chief AI officer, confirmed in sworn court testimony that Grok Gov helped fire more than 2,000 munitions at Iran in 96 hours. What every enterprise AI governance team should learn from the scrutiny that followed.
ai-governanceautonomous-aihuman-oversightaccountability
Guides·8 min
Read →AI Workforce Displacement and the WARN Act: What HR and Legal Teams Need to Know in 2026
AI-driven job displacement is no longer theoretical. WARN Act obligations apply when AI automation causes qualifying mass layoffs, and state laws are adding AI-specific notice requirements on top of the federal baseline. Here is a practical guide for HR and legal teams navigating AI displacement governance in 2026.
workforcehr-complianceai-governanceemployment-law
Guides·9 min
Read →CCPA and AI in 2026: What California's Privacy Law Requires for AI Tools
Using AI tools with California user data means CCPA obligations apply. This guide covers what counts as sharing under CPRA, the CPPA's finalized automated decision-making rules, training data obligations, and a 12-item compliance checklist for small teams.
ccpaprivacycaliforniaai-governance
Guides·10 min
Read →EU AI Act Compliance Checklist 2026: 35 Items for Providers and Deployers
Track all 35 EU AI Act compliance checklist obligations: 15 for providers, 10 for deployers, 10 shared. High-risk AI (Annex III) deadline: December 2, 2027 (extended by EU Digital Omnibus).
eu-ai-actcompliancechecklistenterprise-governance
Templates·9 min
Read →AI Project Intake Checklist: 6-Phase Workflow for Approving New AI Tools
Run new AI tools through this 6-phase AI project intake checklist before deployment: business case, risk, security, legal, rollout, and monitoring.
ai-governancecompliancetemplatesshadow-ai
Guides·9 min
Read →Great American AI Act 2026: What the Obernolte-Trahan Bipartisan Draft Means for Enterprise Compliance
On June 4, 2026, Representatives Obernolte and Trahan released a bipartisan discussion draft of the Great American AI Act. It defines "large frontier developers" as companies with $500M+ revenue, proposes a 3-year preemption of state AI development laws, and creates mandatory third-party audits and whistleblower protections. Here is what the draft says and what it means before it becomes law.
frontier-aiai-policyus-regulationcompliance
Guides·8 min
Read →Anthropic CEO Proposes AI Tax for Universal Income. Sanders Introduced a Bill. What It Means for Enterprise Governance.
On June 10-11, 2026, Anthropic announced a $200M research program on AI economic impact and Dario Amodei proposed taxing AI companies to fund universal basic income. On June 18, Senator Sanders introduced a sovereign wealth fund bill targeting AI firms. Here is what the governance signal means for enterprise teams.
frontier-aiai-policyworkforcecompliance
Guides·9 min
Read →AI Medical Malpractice 2026: Who Is Liable When a Diagnostic AI Gets It Wrong?
Malpractice claims involving AI tools rose 14% between 2022 and 2024, with most in radiology, cardiology, and oncology. When an AI diagnostic recommendation leads to patient harm, liability may fall on the AI developer (product liability), the hospital (negligent implementation), or the physician (failure to exercise independent judgment). Here is how courts and state laws are distributing that risk.
healthcare-aimalpracticeliabilityai-governance
Guides·9 min
Read →Clinical AI Decision Support 2026: FDA January Guidance, Non-Device CDS Criteria, and Human Oversight Requirements
FDA issued updated Clinical Decision Support guidance on January 6, 2026, replacing the 2022 version. It clarifies which AI tools qualify as Non-Device CDS exempt from medical device regulation and which cross the line into regulated SaMD. Key change: enforcement discretion for singular-output CDS. Here is what the four-factor test means in practice.
healthcare-aifdaclinical-decision-supportcompliance
Guides·10 min
Read →FDA AI Medical Device Compliance 2026: SaMD Classification, 510(k), and Predetermined Change Control Plans
FDA has authorized more than 1,350 AI-enabled medical devices as of early 2026. The framework covers classification (Class I, II, III), the 510(k) vs PMA pathway, Good Machine Learning Practices, and Predetermined Change Control Plans for AI systems that update after clearance. A compliance guide for healthcare AI developers and deployers.
fdasamdhealthcare-aimedical-device
Guides·8 min
Read →HIPAA and AI Vendors 2026: Which Tools Require a Business Associate Agreement (and What That Actually Covers)
ChatGPT Enterprise can sign a HIPAA BAA. ChatGPT Health cannot. Claude API can. Microsoft Copilot for Healthcare can. Getting this wrong is a reportable breach under HIPAA regardless of whether data leaked. A plain-English guide to BAA requirements for AI tools used in healthcare workflows.
hipaahealthcare-aicomplianceai-vendors
Guides·9 min
Read →Midjourney's 60-Second Body Scanner Claims to Beat MRI. Here's What FDA Clearance Actually Requires.
Midjourney announced a full-body ultrasonic scanner in June 2026, 60x faster and 10x cheaper than MRI, it claims. But it deliberately avoids diagnostic claims because those trigger FDA medical device clearance. Here is what the SaMD pathway requires, why the regulatory gate exists, and what it means for every team using AI tools that touch patient data.
healthcare-aifdamedical-deviceai-governance