AI literacy under the EU AI Act: what employers actually need to do
Last updated: October 2026. This is general information, not legal advice.
If you work in HR, L&D or operations, you've probably had at least one email this year with a subject line like "URGENT: Is your company AI Act compliant?". Most of them are designed to scare you into buying something.
Let's do this calmly instead. Here's what the AI literacy rule actually says, what changed in 2026, and a practical plan that takes weeks, not a compliance department.
What the law says
Article 4 of the EU AI Act has applied since 2 February 2025. It was one of the very first parts of the Act to take effect.
In plain English: organisations that provide or use AI systems should take measures to support the AI literacy of their staff and anyone else using those systems on their behalf. They should do this taking into account people's technical knowledge, experience, education, and the context in which the AI is used.
The Act defines AI literacy as the skills, knowledge and understanding that let people use AI systems in an informed way, and be aware of the opportunities, risks and possible harms.
What changed in 2026
The Digital Omnibus on AI (Regulation (EU) 2026/1744) amended several parts of the AI Act. For Article 4, the wording moved from organisations having to ensure a sufficient level of AI literacy towards organisations having to take measures to support its development. The text also states explicitly that organisations don't have to guarantee a specific level for any individual.
What that means for you: the pressure to "certify" everyone is lower, but the expectation hasn't gone away. If your people use AI at work, you're expected to be helping them understand it, and it's smart to be able to show what you did.
Does this apply to my company?
If your employees use ChatGPT, Microsoft Copilot, Gemini, AI features in your CRM, AI recruitment tools, or any other AI system for work, then almost certainly yes. You're what the Act calls a "deployer".
It isn't only about tech companies. A 30-person marketing agency where everyone uses ChatGPT is in scope.
What the law does not require
No specific course, provider or certificate
No exam or minimum score
No single approach for everyone. In fact the law asks you to tailor it to roles and context.
If someone tells you that you need their "official AI Act certification", be sceptical.
A practical 5-step plan
Step 1: Find out what's actually being used (week 1)
Send a short, non-judgemental survey: which AI tools do you use, for what, how often? You'll almost certainly find more AI use than you expected. Make it safe to answer honestly. This is a mapping exercise, not a hunt.
Step 2: Set simple ground rules (week 2)
A one-page AI guideline beats a 20-page policy nobody reads. Cover: approved tools, what data must never go in, when to disclose AI use, and the rule that a human checks everything before it goes out.
Step 3: Train by role, hands-on (weeks 3–6)
Everyone: how AI works, what it gets wrong (hallucinations), privacy and confidentiality, and checking habits
Managers: how to lead AI use without being an expert, and setting team norms
High-use roles (communications, marketing, HR, customer service): deeper, task-based practice
Anyone using AI for decisions about people (hiring, performance): extra attention to bias and oversight
People learn AI by using it on their real work, not by watching slides about it.
Step 4: Document it (ongoing)
Keep a simple record: who was trained, when, on what topics, and which materials were used. A spreadsheet is fine.
Step 5: Refresh regularly (every 6–12 months)
Tools change fast. A short refresher when you adopt a new tool, or every year, keeps literacy current.
The opportunity hiding in the obligation
Here's what I see in teams: the companies that treat AI literacy as a box-ticking exercise get box-ticking results. The ones that treat it as a chance to finally get the whole team, not just the enthusiastic half, using AI well get the productivity gains everyone was promised.
Same training budget, very different outcome. The difference is whether people practise on their real work.
How I can help
I run practical AI literacy programmes for teams in the Netherlands and online, in English: role-based, hands-on, and with an attendance and content record for your documentation. No fear-selling.
👉 See AI literacy programmes or book a free call.
FAQ
When did the AI literacy obligation start?
Article 4 of the EU AI Act has applied since 2 February 2025.
Is AI literacy training mandatory?
The AI Act requires providers and deployers of AI systems to take measures to support their staff's AI literacy. It doesn't prescribe a specific training, but practical training matched to roles is one of the clearest ways to meet that expectation.
Does a small business have to comply?
The AI literacy provision applies to organisations that provide or deploy AI systems, regardless of size. For a small business, the measures can be proportionate: a short guideline plus a hands-on session can go a long way.
What should we document?
Who was trained, when, on which topics, and with what materials. Also keep your AI guidelines and a record of the tools in use.
Sources
Regulation (EU) 2024/1689 (AI Act), Article 4 and Article 3(56)
Regulation (EU) 2026/1744 (Digital Omnibus on AI)
European Commission AI Act Service Desk, Article 4
