Guide · EU AI Act
What does the EU AI Act require for AI literacy (Article 4)?
Last reviewed:
Short answer
Article 4 of the EU AI Act requires providers and deployers of AI systems — including companies whose staff use tools like ChatGPT at work — to take measures to support the AI literacy of their staff and other people using AI on their behalf. It has applied since 2 February 2025; after the Digital Omnibus amendments no specific “sufficient” level is mandated, and national market surveillance authorities supervise it from August 2026. No certificate is needed: the European Commission says organisations can keep an internal record of trainings and other guidance.
General information, not legal advice. Always check the official text and your own situation.
How to do it
- 1
Build a general understanding of AI
What is AI, how does it work, which AI is used in your organisation, and what are its opportunities and dangers?
- 2
Establish your role
Are you developing AI systems (provider) or using systems built by others (deployer)? A company whose staff use ChatGPT or Copilot at work is typically a deployer.
- 3
Consider the risks of the AI you use
What do people need to know about each system, which risks — for example hallucinations — should they be aware of, and how can they mitigate them?
- 4
Tailor the training
Adapt it to people’s technical knowledge, experience, education and training, and to the context the AI is used in. Different levels for different groups are fine.
- 5
Keep records
Keep an internal record of trainings and guidance. Deployers of high-risk AI systems also have a separate obligation to train staff for human oversight.
How VAHTOR does it
VAHTOR gives you a workspace AI literacy course with modules and a quiz. You set the pass mark and the timer once for the company, and completion is on the record — next to your AI tool inventory, policy acceptance and audit trail.
- One course for the company
- You set the pass mark
- Completion is on the record
- Employee AI literacy training tracking is part of the Business plan
- It supports your process; it is not a substitute for counsel
Frequently asked questions
Does Article 4 apply if we only use ChatGPT or Copilot?
According to the European Commission’s AI literacy Q&A, yes: a company whose employees use ChatGPT, for example to write advertising text or translate, should inform them about specific risks such as hallucination.
Is AI training mandatory under Article 4?
There is no one-size-fits-all format and no specific mandatory training. The Commission notes that simply asking staff to read instructions for use is often not effective, so training and guidance tailored to each group is the practical route.
Do we need to test or certify employees?
No. The Commission’s Q&A says Article 4 does not require measuring employees’ AI knowledge and no certificate is needed; organisations can keep an internal record of trainings and other initiatives.
When is Article 4 enforced?
Article 4 has applied since 2 February 2025. National market surveillance authorities supervise and enforce it from August 2026, and penalties are based on national law.
Is this page legal advice?
No. It summarises the official text and European Commission guidance as of 28 September 2026. Check the official EU AI Act text and get legal advice for your situation.
Related
Sources
Sources were checked on 28 September 2026.