AI literacy: what Article 4 of the EU AI Act requires and how to comply
Article 4 of Regulation (EU) 2024/1689 requires providers and deployers of AI systems to take measures to ensure, to their best extent, a sufficient level of AI literacy among their staff and other people operating AI systems on their behalf, taking into account their knowledge, experience and the context of use. It has applied since 2 February 2025. In practice, organizations meet it with role-based training and records of who was trained, when and with what result.
What AI literacy means
The AI Act defines it as the skills, knowledge and understanding that allow people to make an informed use of AI systems and to be aware of their opportunities, risks and possible harms. It is not about training programmers: it is about making sure everyone who uses or oversees AI knows what the tool does, where it fails and which rules to follow.
- Understand what an AI system is and how it produces outputs.
- Know its limitations: invented data, bias, outdated information.
- Know what information must not be entered into unapproved tools.
- Review and oversee outputs before using them in decisions.
- Know the internal rules and how to report a problem.
Who it applies to
| Who | Must take measures? | Comment |
|---|---|---|
| Providers (develop or place AI on the market) | Yes | For their staff and those operating their systems |
| Deployers (use AI at work) | Yes | Includes using third-party AI assistants for professional purposes |
| Purely personal, non-professional use | No | Outside the scope of the AI Act |
| Organizations outside the EU | May apply | When their systems or outputs are used in the EU |
The obligation does not depend on the system’s risk level: it also applies to minimal-risk uses such as a writing assistant, although the expected level of training grows with the risk and the responsibility of the role.
What to cover by role
| Role | Recommended minimum content |
|---|---|
| All staff who use AI | What AI is, limitations, data never to enter, approved tools, checking outputs, incident reporting |
| People who oversee AI-assisted decisions | Real human oversight, automation bias, transparency, recording decisions |
| Owners of high-risk systems | Provider instructions, risk management, logs and the AI Act’s specific obligations |
| Top management | Risks to the organization, AI policy, responsibilities and the regulatory framework |
What evidence to keep
The AI Act does not require a certificate or a specific format, but the organization must be able to show the measures it took. Common evidence includes:
- A training program with content by role and an update date.
- An attendance record: person, department, date, modules completed.
- Assessment results with a defined pass mark.
- A refresher plan: onboarding of new people and periodic updates.
- The link to the AI use policy and the list of approved tools.
How it relates to ISO/IEC 42001
If your organization implements an AI management system under ISO/IEC 42001, AI literacy builds on clauses 7.2 (competence) and 7.3 (awareness): the same training records serve as evidence for both frameworks.
Deadlines and changes
The Article 4 obligation has applied since 2 February 2025, together with the prohibited practices. The rest of the AI Act applies in phases, and the European Commission has proposed adjustments to some deadlines and obligations. Check the text in force and your competent authority’s guidance for your case; this guide is not legal advice.
Frequently asked questions
Since when is AI literacy mandatory?
Since 2 February 2025, under Article 4 of Regulation (EU) 2024/1689. Check whether later changes apply to your case.
Do I need an official AI literacy certificate?
No. The AI Act does not require a certificate; it requires measures, and the organization must be able to show them, for example with training and assessment records.
Does it apply if we only use third-party AI tools?
Yes. Anyone using AI systems for professional purposes is a deployer and must take AI literacy measures for their staff.
How often should the training be repeated?
The AI Act does not set a frequency. A common practice is once a year, at the onboarding of each new person and whenever tools, policy or regulation change.
Related guides
- ISO 42001 mandatory documents (AI management system)
- What is ISO/IEC 42001? The artificial intelligence management system
Updated: 2026-10-20