What 'AI literacy' actually means under the EU AI Act (and what proof you need)

Your designer pastes briefs into ChatGPT. Your dev uses Copilot. Article 4 has been live since February 2025. Almost nobody mentions it. That gap is a problem — because it probably applies to you.

What Article 4 actually says

The exact text: "Providers and deployers of AI systems shall take measures to ensure, to their best extent, a sufficient level of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf."

Plain English: if your staff use AI tools, they need enough knowledge to use them properly. They need to know limitations. They need to know the rules.

Who this applies to

Every team where staff use AI at work. That's almost everyone now.

"Deployers" — teams using AI tools built by someone else — are explicitly covered. You don't have to build AI to have Article 4 obligations. You use ChatGPT? You're a deployer.

What 'sufficient' actually means for your team

The regulation deliberately skips a minimum hour count or fixed curriculum. "Sufficient" depends on:

• The AI system in use (ChatGPT vs. a hiring-screening tool)
• The person's role (support rep vs. developer)
• The potential impact of their use (internal drafts vs. customer-facing output)

A support rep using an AI chatbot needs different literacy than a developer building AI features. Both need documented training.

In practice: 60–90 minutes works as a baseline for most SME staff. Cover what AI is, how your tools work, the rules, and responsible use.

What proof you need on file

You need to show compliance. That means documentation.

At minimum:

1. A training record — who, when, what was covered
2. Completion acknowledgements from each staff member
3. Evidence the training covered your actual AI tools and the relevant rules

You don't need an externally certified course. Internal training with a completion log works for most teams.

The mistake most teams make

Most teams assume staff "know how to use" AI tools. That's not literacy. The requirement covers:

• What AI systems can and cannot do
• Their known limitations and risks
• Applicable rules and requirements
• When to apply human oversight

Ask your team: "Do you understand EU AI Act rules for AI use at work?" Most will say no. That's your gap.

What to do right now

1. Run a short AI literacy session with your team (we have five modules, about an hour total)
2. Get completion records for each person
3. Keep them on file — you'll need to produce them if asked

NudgeCompliant generates training records and completion certificates automatically. Your team completes the modules. You export the log.

This should have happened by February 2025. If it didn't, do it now. The obligation is still active.

Your 10-minute action: Create a spreadsheet with three columns: staff name, AI tools they use, training completed (yes/no). Fill it in for your whole team. Every "no" is someone who needs training this week.

This article is for information only. Not legal advice.