EU AI Act AI literacy (Article 4): “what do we actually have to provide?” A small-business checklist
“Article 4 of the AI Act does not entail an obligation to measure the knowledge of AI of employees.”
— European Commission, AI Literacy Q&A (checked 13 Oct 2026)
Why the rule exists
Most AI harm in small firms is not a rogue model; it is a person trusting an output they should have checked, or pasting data they should not have. Article 4 targets that: the people who touch the tool should know what it is, what it is for and where it goes wrong.
The 4 steps the Commission lists
- General understanding. What is AI, how does it work, what AI do we use, what are the opportunities and dangers?
- Your role. Do you build AI systems (provider) or only use systems made by others (deployer)?
- The risk of each system. What must staff know when using it, which risks should they watch for, and how do they reduce them?
- Tailor it. Build actions on that analysis, considering people's technical knowledge, experience and training, and the context and people the AI is used on.
Who counts: anyone in your organisation dealing directly with an AI system, and also people acting on your behalf such as contractors or service providers. The Commission also notes that simply asking staff to read the instructions for use is often ineffective.
Dates that matter (from the Commission's AI Act page)
| What | Applies from |
|---|---|
| Prohibited practices and AI literacy (Art. 4) | 2 Feb 2025 |
| Governance rules and general-purpose AI model obligations | 2 Aug 2025 |
| Most of the Act | 2 Aug 2026 |
| High-risk use cases in Annex III areas | 2 Dec 2027 (moved by the AI Omnibus) |
| High-risk AI in regulated products (Annex I) | 2 Aug 2028 |
Common mistakes
- Buying a "certificate" course and stopping there. No certificate is required; what counts is training that fits your tools and risks.
- Forgetting contractors and freelancers who use AI on your behalf.
- One generic slide deck for everyone. A support agent using a chatbot needs different points from a developer fine-tuning a model.
- No record. The law does not prescribe a form, but a short written note of what you did, for whom and when, is the easiest way to show you took measures.
- Confusing deployer training for high-risk systems (Art. 26: staff must be trained for human oversight) with the general Article 4 duty. If you use a high-risk system, both apply.
One-page checklist
- List every AI tool in use (including free chatbots staff use for work)
- Mark your role per tool: provider or deployer
- Note the main risk per tool (wrong output, personal data, bias, over-reliance)
- Short training or briefing per group, with dos and don'ts
- Include contractors who use AI for you
- Keep a dated record and review it when tools change
Frequently asked questions
Does the EU AI Act require an AI literacy certificate?
No. The Commission's Q&A says no strict requirements or mandatory trainings are imposed. Organisations should take measures that fit their role, their AI systems and the risks.
When did the AI literacy obligation start?
2 February 2025, together with the prohibited-practices rules.
Do we have to test employees' AI knowledge?
No. Article 4 does not require measuring employees' AI knowledge, and after the AI Omnibus no specific 'sufficient' level is mandated.
Does Article 4 apply if we only use ChatGPT-style tools?
If you use AI systems in your business you are a deployer, and Article 4 asks deployers to support the AI literacy of staff and others using those systems on their behalf.
When do the high-risk rules apply?
Per the Commission, high-risk use cases in Annex III areas apply from 2 December 2027 and high-risk AI in regulated products (Annex I) from 2 August 2028, after the AI Omnibus.
Official sources
- European Commission: AI Literacy Questions & Answers
- European Commission: AI Act regulatory framework and timeline
Not legal advice. A free explainer of the European Commission's public guidance; the AI Act is being amended, so check the Commission pages or a lawyer before you rely on it. Last checked 13 Oct 2026.
Get free deadline reminders. Free: one short email every Wednesday listing the GST, TDS and ITR due dates coming up. Unsubscribe anytime.
Subscribe free on Gumroad (email only, no payment).
Or put every date in your calendar now: free India tax deadline calendar (Google Calendar, Outlook, phone; .ics + spreadsheet).
If you want a ready-made tool
Want the templates instead of a blank page (AI inventory, literacy plan, training record)? EU AI Act Readiness Kit (paid, editable).
Unadhi Guides are free, independent explainers. Not an official government publication. We correct errors as soon as we find them: write to mininglife7@gmail.com.
Partners earn 50% on every sale until 11 Nov 2026 (launch month; 30% after). Nothing to buy: become an Unadhi affiliate (free to join) and share our tools.