EU AI Act, Article 4

What AI literacy actually requires

Last updated

Justas Butkus is a fractional AI officer based in Vilnius, Lithuania, working with mid-market companies across the UK and EU. He advises on AI governance and literacy obligations and builds the production AI systems those obligations apply to.

Short answer

Article 4 of the EU AI Act requires providers and deployers to ensure a sufficient level of AI literacy among staff operating AI systems, proportionate to their role and context. It has applied since February 2025. There is no mandated curriculum, no examination and no certificate.

What the obligation says

Article 4 is short and outcome-based. Providers and deployers must take measures to ensure, to their best extent, a sufficient level of AI literacy among their staff and other people operating AI systems on their behalf — including contractors.

"Sufficient" is deliberately relative. It is judged against the person's role, their technical knowledge, the context the system is used in, and who it affects. A developer building a system and an administrator using its output do not need the same understanding.

What it does not require

This is where most of the confusion, and most of the selling, happens.

  • No mandated curriculum. The Act does not specify content.
  • No examination or certification. There is no exam to pass and no certificate that constitutes compliance.
  • No appointed role. Article 4 does not require an AI officer, a training manager, or any named position.
  • No single standard for everyone. A uniform course delivered to all staff regardless of role is arguably the wrong shape, not the safe one.

What compliance looks like in practice

  1. Establish who operates AI systems on your behalfStaff and contractors. This list is usually longer than expected once unapproved tools are counted.
  2. Segment by what they actually need to understandSomeone acting on an AI output needs to understand its failure modes. Someone building the system needs considerably more.
  3. Cover capabilities, limitations and oversightWhat these systems are good at, how they fail, why outputs need checking, and when to escalate.
  4. Make it specific to the systems you actually runGeneric AI awareness training is weak evidence. Training on the systems in your own business is strong evidence.
  5. Document what you didWhat was delivered, to whom, when, and the reasoning for the segmentation. Documentation is the evidence, not the training itself.

Why the documentation matters more than the course

Article 4 has no prescribed format, which means there is no box to tick that proves compliance. What you are left with is the ability to demonstrate a reasoned, proportionate approach.

In practice the question does not usually arrive from a regulator. It arrives in a procurement questionnaire, an insurer's renewal form, or an enterprise customer's due diligence pack, and it is phrased as "describe your AI literacy measures". A company that can answer with a segmented, documented, systems-specific approach clears that gate. A company holding a generic completion certificate often does not.

Frequently asked questions

Does the EU AI Act require AI training for staff?

It requires providers and deployers to ensure a sufficient level of AI literacy among staff and contractors operating AI systems on their behalf, proportionate to their role and context. Training is the usual way to achieve that, but no specific training is mandated.

Is there a required AI literacy certification?

No. Article 4 prescribes no curriculum, no examination and no certificate. Any supplier claiming a certification is required by the Act is misrepresenting it. Documented, proportionate, role-appropriate measures are what the obligation asks for.

When did Article 4 come into effect?

It has applied since 2 February 2025. Enforcement machinery and supervisory powers came into force with the main compliance deadline on 2 August 2026.

Does this apply to contractors as well as employees?

Yes. The obligation covers staff and other persons operating AI systems on your behalf, which includes contractors and service providers.

How do we evidence compliance?

Document who operates AI systems, how you segmented them by need, what was covered, when it was delivered, and the reasoning. The documentation is the evidence, since the Act prescribes no format that could otherwise serve as proof.

If a questionnaire has just asked you about this

That is usually the real trigger, and it is a bounded piece of work with a clear finish line.

Get in touch