Key facts
- Definition: the skills and understanding needed to use, oversee and question AI responsibly.
- Legal basis: Article 4 of the EU AI Act, a duty on providers and deployers.
- It has applied since 2 February 2025.
- It covers staff and anyone operating AI on the organisation's behalf.
- It is outcome-based and proportionate — no specific course is mandated, but you must evidence it.
What does Article 4 require?
Article 4 requires providers and deployers to take measures to ensure, to their best extent, a sufficient level of AI literacy among their staff and other people operating AI on their behalf. It is outcome-based: there is no prescribed course, but you must make a genuine, proportionate effort and be able to show it.
Who needs to be AI literate?
Everyone who uses, oversees or makes decisions based on AI — not just technical teams. The level should match the role: a general awareness baseline for all staff, deeper training for people who operate or oversee higher-risk systems, and leadership awareness so the board can govern AI properly.
What should an AI literacy programme cover?
Tailor it to role and risk, but most programmes cover: what AI is and how it fails; the organisation's AI policy and acceptable use; data protection and confidentiality; recognising bias and inaccurate output; when a human must stay in the loop; and how to raise concerns.
How do you evidence AI literacy?
Keep it documented: role-based training materials, attendance or completion records, your acceptable-use policy, and a named owner. That record demonstrates compliance to regulators and increasingly to buyers running supplier due diligence.
Why does AI literacy matter beyond compliance?
People who understand AI's limits use it more safely, follow policy and exercise meaningful human oversight. It is one of the cheapest, highest-leverage steps in an AI compliance programme. See our AI literacy guide.
Frequently asked questions
What is AI literacy under the EU AI Act?
The skills, knowledge and understanding that let staff use and oversee AI safely, lawfully and effectively, as required by Article 4.
When did the AI literacy duty start?
Article 4 has applied since 2 February 2025.
Who does the AI literacy obligation apply to?
Providers and deployers of AI, in respect of their staff and anyone operating AI on their behalf.
Is there a required AI literacy course?
No — the duty is outcome-based. You must take proportionate measures and evidence them, but no specific course is mandated.
How do you evidence AI literacy?
With role-based training materials, completion records, an acceptable-use policy and a named owner.
Does AI literacy apply to small businesses?
Yes — but proportionately. A focused awareness session and a clear acceptable-use policy can satisfy the duty for a small team.
Related pages
Sources
Last updated 19 June 2026.