Regfortis

EU AI Act Article 4: AI literacy requirements for employers

Article 4 requires every business deploying AI systems to take action to ensure their staff have sufficient AI literacy — a proportionate, risk-based obligation that applies from 2 August 2026.

Last regulatory review: 14 August 2026 · Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744

What does Article 4 require?

Article 4 of Regulation (EU) 2024/1689 (as amended) requires providers and deployers of AI systems to take measures to ensure, to the best of their ability, a sufficient level of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training, and the context in which the AI systems are to be used.

The key word is proportionality. Article 4 does not require every employee to complete a qualification or pass a test. It requires you to ensure that people dealing with AI systems — in a way that matters for their work and for the people the AI affects — have enough understanding to do so responsibly.

For a customer service team using an AI chatbot, that might mean a brief briefing on how the AI works, what it can get wrong, and when to escalate to a human. For an HR manager using AI-assisted shortlisting, it means understanding algorithmic bias risks and the conditions under which the AI's outputs should not be relied upon without human review.

Who does Article 4 apply to?

Article 4 applies to both providers (businesses that develop AI systems) and deployers (businesses that use AI systems in a professional context). Most SMEs are deployers. If your business uses any commercially available AI tool — a generative AI writing assistant, an AI-powered customer support system, automated document processing, or similar — Article 4 applies to you.

The obligation covers staff who "deal with the operation and use of AI systems" on the organisation's behalf. This is not every employee — it focuses on those who interact with AI outputs, oversee AI decisions, or use AI tools as part of their professional role.

What does "sufficient AI literacy" mean?

The Act does not define a minimum standard for AI literacy. Instead it directs businesses to take into account: the technical knowledge of the people involved, their experience, education and training, and the context in which the AI system is used.

In practice, sufficient AI literacy typically means a person understands:

  • What the AI system is designed to do and what it is not designed to do
  • The basis on which the AI generates its outputs (enough to understand its limitations)
  • What errors or biases the AI system might produce and how to spot them
  • When to apply their own judgement rather than accepting AI outputs uncritically
  • Who to escalate to if the AI behaves unexpectedly

The higher the risk of the AI system and the more consequential the decisions it informs, the deeper the literacy level expected for the people involved.

Practical compliance steps for SMEs

1. Map your AI tools

List every AI system or AI-powered feature your business uses professionally. Include SaaS tools with AI features, custom integrations, and third-party APIs. Note which teams or individuals use each tool.

2. Identify affected staff

For each AI tool, identify which staff members interact with its outputs, rely on its decisions, or use it as part of their workflow. These are the people for whom AI literacy measures are required.

3. Assess existing literacy and gaps

Consider what each person already understands about the AI tool and where gaps exist. A software engineer who configured the tool needs less formal literacy support than a non-technical manager relying on its output for staff evaluations.

4. Provide proportionate guidance or training

This does not need to be a formal course. Written guidance on how a tool works and its limitations, a team briefing, or a short video walkthrough can satisfy Article 4 for lower-risk deployments. For higher-risk AI use, more structured and documented training is advisable.

5. Document what you have done

Record who received literacy support, what form it took, when, and which AI systems it covered. Update these records when new AI tools are adopted or when AI literacy support is refreshed.

6. Review regularly

AI literacy is not a one-off exercise. Schedule reviews at least annually or whenever a new AI system is introduced. The Act requires you to maintain adequate literacy as AI use evolves.

What Article 4 does NOT require

  • Any specific certification, qualification, or training course for staff
  • AI literacy measures for staff who do not interact with AI systems professionally
  • The same level of literacy for all roles — proportionality explicitly applies
  • A specific minimum number of training hours
  • Any reporting to a regulatory authority (no registration obligation under Article 4)

Frequently asked questions

Does Article 4 require a specific training course or certification?

No. Article 4 requires deployers to take "measures" to support sufficient AI literacy — but the Act does not specify any course, qualification, minimum duration, or certification. The obligation is proportionality-based: the level of literacy support required scales with the complexity and risk of the AI systems used and the roles involved.

Does Article 4 apply to all staff or only those who work directly with AI?

Article 4 applies to "staff and persons dealing with the operation and use of AI systems on their behalf." In practice this means staff who interact with AI outputs, make decisions assisted by AI, or supervise AI systems. It does not require AI literacy training for every employee regardless of whether they use AI.

What documentation do I need for Article 4 compliance?

The Act does not prescribe a specific documentation format. However, maintaining records of what AI literacy measures you took, who they covered, and when is strongly advisable. If a supervisory authority investigates, documented evidence of your approach will demonstrate good-faith compliance.

We are a very small business (under 10 employees). Does Article 4 still apply?

Yes — there is no SME or size exemption for Article 4. However, the proportionality principle means that a very small business using a basic AI writing assistant has significantly lighter obligations than a mid-size firm using AI for HR decisions or customer credit assessments. A brief internal briefing or guidance document may be entirely sufficient.

Does Article 4 apply if we only use AI embedded in standard software (like spelling correction or search)?

The Act covers AI systems as defined in Article 3. Not every piece of software qualifies — purely statistical tools and simple rule-based systems are excluded. However, AI features in modern SaaS products (generative AI assistants, AI-powered recommendations, automated classification) typically do fall within scope. Review each tool you use against the Article 3 definition.

Check your Article 4 compliance status

The Regfortis assessment covers AI literacy and all other current obligations. See what applies to your business in 5 minutes.

Start free assessment

View full checklist

Official source

This guide is for informational purposes only and does not constitute legal advice.