Yes. If your staff use, deploy, or oversee AI systems at work, your company almost certainly needs to provide AI training under the EU AI Act. The obligation is Article 4, AI literacy, and it has been enforceable since February 2025. It is not a future deadline you can plan around. It applies now.
This catches most people by surprise, because the headlines focus on the big high-risk rules. Article 4 is quieter, broader, and already live. It reaches ordinary businesses using everyday tools, not just AI developers.
Providers and deployers shall take measures to ensure a sufficient level of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf.
Article 4 has no company-size carve-out. A ten-person recruitment agency using an AI screening tool carries the same literacy duty as a multinational. "We are too small" is not a defence.
Who Exactly Does Article 4 Cover?
Scope of the literacy duty
Deployers, not just developers
The Act splits roles into providers (who build AI systems) and deployers (who use them). Article 4 binds both. The vast majority of businesses are deployers, and that is the trap: most assume the rules are only for AI companies. They are not.
Does Article 4 apply to you?
Quick test: if a person on your payroll relies on an AI output to do part of their job, that person needs to be AI literate under Article 4.
What Counts as Compliant AI Training?
What 'sufficient AI literacy' means
Risk-aware, role-relevant, documented
The Act does not prescribe a single curriculum. It asks for a sufficient level of literacy, judged against your context. In practice, a defensible programme covers four things:
What a compliant programme covers
How the AI works
Capabilities and limits of the systems your staff actually use
The risks
Bias, errors, data protection, and when not to trust an output
Their obligations
What the AI Act requires of your specific roles
Safe use in practice
Human oversight and escalation for your real workflows
The key word the regulators use is sufficient, measured against the role. A recruiter using an AI screening tool needs deeper literacy than an employee who occasionally drafts an email with AI. Training has to be role-relevant, and crucially, documented, so you can demonstrate you took measures.
The Cost of Doing Nothing
Why this is not optional
Enforceable now, and a foundation for what follows
Article 4 sits underneath the rest of the Act. When the high-risk obligations for Annex III systems apply from 2 December 2027 (the date set by the Omnibus deal of 7 May 2026), an untrained workforce becomes a compounding liability, not a single gap. Regulators assessing any later breach will look first at whether basic literacy measures were ever in place.
Free tool: not sure where you stand? Run the AI Readiness Check to see your exposure in about ten minutes.
Compliance Checklist
Article 4 readiness
Click to check offCommon Questions
It requires AI literacy for any staff who use or oversee AI systems on the company's behalf. In most modern businesses that is a large share of the workforce, but it is scoped to those who actually interact with AI, at a level relevant to their role.
Article 4 has been enforceable since February 2025. It is a current legal obligation, not a future deadline.
Yes. Article 4 has no company-size threshold. A small business that deploys AI carries the same literacy duty as a large one.
You are in breach of an enforceable obligation, and you weaken your position on every later requirement of the Act, since regulators assess whether basic literacy measures were in place when judging any breach.
A focused, role-relevant programme can be delivered in a few hours per employee. The Agentic Fluxus staff course is built to meet Article 4 directly and leaves you with the records you need.
What To Do Right Now
Ready to get your team compliant?
Staff AI Compliance Awareness · €39/person · Certificate included · 14-day guarantee