Yes. If your staff use, deploy, or oversee AI systems at work, your company almost certainly needs to provide AI training under the EU AI Act. The obligation is Article 4, AI literacy. It has applied since February 2025 and has been enforceable since August 2026. It is not a future deadline you can plan around. It applies now.
This catches most people by surprise, because the headlines focus on the big high-risk rules. Article 4 is quieter, broader, and already live. It reaches ordinary businesses using everyday tools, not just AI developers.
Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf.
The amended article also states its own limit: it does not require providers or deployers to guarantee any specific level of AI literacy of any individual. The duty is about the measures you take, not a certified competence level per person.
Article 4 has no company-size carve-out. A ten-person recruitment agency using an AI screening tool carries the same literacy duty as a multinational. "We are too small" is not a defence.
Who Exactly Does Article 4 Cover?
Scope of the literacy duty
Deployers, not just developers
The Act splits roles into providers (who build AI systems) and deployers (who use them). Article 4 binds both. The vast majority of businesses are deployers, and that is the trap: most assume the rules are only for AI companies. They are not.
Does Article 4 apply to you?
Quick test: if a person on your payroll relies on an AI output to do part of their job, your Article 4 literacy measures need to reach that person.
What Counts as Compliant AI Training?
What the literacy duty asks for
Risk-aware, role-relevant, documented
The Act does not prescribe a single curriculum. It asks you to take measures that support the development of AI literacy, judged against your context, and it is explicit that you do not have to guarantee any specific level of AI literacy of any individual. In practice, a defensible programme covers four things:
What a compliant programme covers
How the AI works
Capabilities and limits of the systems your staff actually use
The risks
Bias, errors, data protection, and when not to trust an output
Their obligations
What the AI Act requires of your specific roles
Safe use in practice
Human oversight and escalation for your real workflows
The duty is proportionate, measured against the role and the context the AI systems are used in. A recruiter using an AI screening tool needs deeper literacy support than an employee who occasionally drafts an email with AI. Training has to be role-relevant, and crucially, documented, so you can demonstrate you took measures.
The Cost of Doing Nothing
Why this is not optional
Enforceable now, and a foundation for what follows
Article 4 sits underneath the rest of the Act. When the high-risk obligations for Annex III systems apply from 2 December 2027 (the date set by the Omnibus deal of 7 May 2026), an untrained workforce becomes a compounding liability, not a single gap. Regulators assessing any later breach will look first at whether basic literacy measures were ever in place.
Free tool: not sure where you stand? Run the AI Readiness Check to see your exposure in about ten minutes.
Compliance Checklist
Article 4 readiness
Click to check offCommon Questions
It requires measures that support the development of AI literacy for any staff who use or oversee AI systems on the company's behalf. In most modern businesses that is a large share of the workforce, but it is scoped to those who actually interact with AI, at a level relevant to their role. It does not require you to guarantee any specific level of literacy in any individual.
Article 4 has applied since February 2025, and it has been enforceable since August 2026, when national market surveillance authorities gained their supervisory powers. It is a current legal obligation, not a future deadline.
Yes. Article 4 has no company-size threshold. A small business that deploys AI carries the same literacy duty as a large one.
You are in breach of an enforceable obligation, and you weaken your position on every later requirement of the Act, since regulators assess whether basic literacy measures were in place when judging any breach.
A focused, role-relevant programme can be delivered in a few hours per employee. The Agentic Fluxus staff course is built to meet Article 4 directly and leaves you with the records you need.
What To Do Right Now
Ready to get your team compliant?
Staff AI Compliance Awareness · €39/person · Certificate included · 14-day guarantee