Guide · EU AI Act
What does the EU AI Act require for AI literacy (Article 4)?
Last reviewed:
Short answer
Article 4 of the EU AI Act requires companies that provide or use AI systems, including staff using ChatGPT at work, to take measures that support their people's AI literacy. It has applied since 2 February 2025, and national authorities supervise it from August 2026. No certificate is required: keep an internal record of training and guidance.
General information, not legal advice. Always check the official text and your own situation.
How to do it
- 1
Build a general understanding of AI
What is AI, how does it work, which AI is used in your organisation, and what are its opportunities and dangers?
- 2
Establish your role
Are you developing AI systems (provider) or using systems built by others (deployer)? A company whose staff use ChatGPT or Copilot at work is typically a deployer.
- 3
Consider the risks of the AI you use
What do people need to know about each system, which risks — for example hallucinations — should they be aware of, and how can they mitigate them?
- 4
Tailor the training
Adapt it to people’s technical knowledge, experience, education and training, and to the context the AI is used in. Different levels for different groups are fine.
- 5
Keep records
Keep an internal record of trainings and guidance. Deployers of high-risk AI systems also have a separate obligation to train staff for human oversight.
How VAHTOR does it
VAHTOR gives you a workspace AI literacy course with modules and a quiz. You set the pass mark and the timer once for the company, and completion is on the record — next to your AI tool inventory, policy acceptance and audit trail.
- One course for the company
- You set the pass mark
- Completion is on the record
- Employee AI literacy training tracking is part of the Business plan
- It supports your process; it is not a substitute for counsel
Frequently asked questions
Does Article 4 apply if we only use ChatGPT or Copilot?
According to the European Commission’s AI literacy Q&A, yes: a company whose employees use ChatGPT, for example to write advertising text or translate, should inform them about specific risks such as hallucination.
What constitutes AI literacy?
In practice, AI literacy means people understand what AI is, how it works, which AI your organisation uses and its opportunities and dangers; know whether the company is a provider or a deployer; and know the risks of the systems they use, such as hallucinations, and how to mitigate them. Training should fit each group's knowledge and context.
Is AI training mandatory under Article 4?
There is no one-size-fits-all format and no specific mandatory training. The Commission notes that simply asking staff to read instructions for use is often not effective, so training and guidance tailored to each group is the practical route.
Do we need to test or certify employees?
No. The Commission’s Q&A says Article 4 does not require measuring employees’ AI knowledge and no certificate is needed; organisations can keep an internal record of trainings and other initiatives.
When is Article 4 enforced?
Article 4 has applied since 2 February 2025. National market surveillance authorities supervise and enforce it from August 2026, and penalties are based on national law.
Is this page legal advice?
No. It summarises the official text and European Commission guidance as of 28 September 2026. Check the official EU AI Act text and get legal advice for your situation.
Related
Sources
Sources were checked on 28 September 2026.