Content couldn't load. If you're viewing this offline, run it through a local server — the live site loads content/*.json over the web.
Data Privacy · AI Governance · Records Management

Nicholas You

Helping boards, executives and general counsel turn privacy and AI risk into competitive advantage.
Credentialed
{{ cred }}
Featured Posts
{{ post.category }}{{ post.date }}
{{ post.title }}
{{ post.dek }}
Read →
All Writing
“The organizations that win the next decade won't hold the most data — they'll be the ones most trusted to hold it.”
Nicholas You
Writing

Essays & Field Notes

On data privacy, AI governance, and records management — written for the people who carry the risk.
{{ chip.label }}
{{ post.category }}{{ post.date }}
{{ post.title }}
{{ post.dek }}
Read · {{ post.readTime }} →
← All Writing
{{ current.category }}{{ current.date }}{{ current.readTime }}

{{ current.title }}

{{ current.dek }}
“{{ current.pullQuote }}”

{{ sec.heading }}

{{ sec.text }}

Share LinkedIn Copy link Copied ✓
Keep Reading
{{ post.category }}
{{ post.title }}
Read →
← All Writing Get in touch →
Contact

Start a Conversation

If you're a board member, executive, or General Counsel facing AI risk or privacy exposure, tell me where it hurts. I read every message.
Message sent.
Thank you — I'll be in touch shortly. For anything urgent, email me directly at [email protected].

Please complete the required fields. Couldn't send — email [email protected].
Direct
[email protected] LinkedIn → /in/nicholasyou
Engagements typically begin with a 30-minute confidential call to scope the risk.
About
When AI fails at the board level, it's rarely a technology problem. It's a governance failure — and governance is the part I build.

Regulatory investigations, class actions, reputational damage — these have become the common outcome when AI adoption outpaces accountability. I work with executives, boards, and General Counsel to make sure it doesn't.

My focus is AI governance, data privacy, information governance, and regulatory compliance. I help organizations build programs that hold up under scrutiny and still move the business forward — translating requirements like the EU AI Act, NIST AI RMF, ISO 42001, GDPR, and CCPA into operating models teams can actually execute. Not theory. Working programs.

My role doesn't end at a policy draft or a set of governance artifacts. I stay through implementation. Whether you're building from scratch or fixing what isn't working, the goal is the same: put real structure in place and make it stick.

The result is simple. Organizations leave with control over their data, clear ownership of their AI and privacy risks, and the ability to move faster — because the guardrails and the processes are finally built.

Engagements
AI governance frameworks & policies
Governance build-outs & strategy realization
AI & privacy risk assessments
Copilot, Cowork & Claude prompt engineering
Privacy program design & assessments
Records management implementation
Legal process optimization
Credentials & Certifications
{{ g.label }}
{{ c.abbr }}
{{ c.name }}
{{ c.sub }}
Areas of Expertise
AI Governance & Strategy
EU AI Act · NIST AI RMF · FS AI RMF · ISO 42001
Data Privacy & Protection
GDPR · CCPA/CPRA · NIST PF · ISO 27701 · COPPA · CIPA · PIPEDA · GAPP
Information Governance & Records Management
GARP · ISO 15489
Regulatory Compliance
Multi-jurisdiction readiness
Legal Process Optimization
ACC
Contracts Lifecycle Management
Policy to execution
Consumer Protection
TCPA · CAN-SPAM
User Experience
Governance people will actually use
If you're a board member, executive, or General Counsel facing AI risk or privacy exposure, we should talk.
Start a conversation
Maxims · Leadership Notes · Frameworks

Thoughts & Foundations

Maxims worth pinning above a desk, and a few frameworks worth keeping in a boardroom.
{{ q.num }} “{{ q.text }}”
Leadership Notes
{{ ln.h }}
{{ ln.t }}
Read →
Frameworks
{{ f.num }}
{{ f.label }}
{{ f.summary }}
← Thoughts & Foundations
{{ piece.kindLabel }}

{{ piece.label }}

{{ piece.summary }}

{{ para }}

{{ row.n }}
{{ row.h }}
{{ row.t }}
{{ st.v }}
{{ st.l }}
← Thoughts & Foundations Get in touch →
Nicholas You
I make it personal when it comes to your data.
Site
Writing
Maxims
About
Topics
Data Privacy
AI Governance
Records Management
Connect
Email LinkedIn
© {{ year }} Nicholas You. All rights reserved.
Privacy · AI · Records