Key takeaways
- Article 4 of the EU AI Act requires every company whose staff use AI tools at work to ensure sufficient AI literacy, with no SME exemption.
- National authorities begin supervising the AI literacy duty on 2 August 2026.
- The 2026 Digital Omnibus softened Article 4 into an obligation of effort but did not postpone it.
- Compliance means mapping AI use, running role based training, and keeping records of who was trained, when, and on what.
Three weeks from now, regulators across Europe start checking a rule most business owners have never read. Article 4 of the EU AI Act requires every company whose employees use AI systems at work, including everyday tools like ChatGPT, to take measures that ensure sufficient AI literacy of their staff. The duty has applied since 2 February 2025, and national supervision begins on 2 August 2026.
Who does EU AI Act Article 4 apply to?
EU AI Act Article 4 applies to providers and deployers of AI systems, and deployer includes any ordinary company whose employees use AI tools at work. If your team drafts emails with ChatGPT, summarizes documents with an AI assistant, or runs any AI supported workflow, your company is a deployer under Regulation (EU) 2024/1689 and the AI literacy requirement covers you. There is no SME exemption. A ten person consultancy carries the same duty as a ten thousand person bank, scaled to its own context and risk.
Many owners assume the AI Act only concerns companies that build AI. It does not. AI Act deployer obligations attach to use, not development, and Article 4 has applied since 2 February 2025. What changes on 2 August 2026 is not the duty but who is watching: that is the date national authorities begin supervising and enforcing the AI literacy rules.
What does Article 4 require after the 2026 Digital Omnibus?
After the 2026 Digital Omnibus, Article 4 requires employers to take appropriate measures to support the development of AI literacy among their staff, which is an obligation of effort rather than a guarantee of results. The European Parliament adopted the Omnibus on 16 June 2026 and the Council followed on 29 June 2026. The softening matters in practice: you no longer have to prove that every employee reached a defined skill level, you have to show that you took reasonable, proportionate steps to get them there.
What the Omnibus did not do is just as important. It did not postpone Article 4 and it did not delay the 2 August 2026 supervision start. The Omnibus pushed back obligations for high risk AI systems to 2 December 2027 and 2 August 2028, and some commentary has blurred those timelines together. Do not confuse them. The AI literacy duty stands, and supervision of it begins on schedule this summer.
What counts as sufficient AI literacy?
Sufficient AI literacy is defined in Article 3(56) of the EU AI Act as the skills, knowledge and understanding that allow providers, deployers and affected persons to make an informed deployment of AI systems and to gain awareness about the opportunities and risks of AI and the possible harm it can cause. In plain terms, your staff should understand what AI tools can do, where they fail, and what damage careless use can cause to clients, data subjects, and the business itself.
There is no fixed EU curriculum, hour count, or exam. Measures must be proportionate to role, context and risk, taking into account staff technical knowledge, experience, education and training. What a marketing assistant needs is different from what a recruiter or an accountant feeding sensitive data into a model needs. The European Commission's AI literacy Q&A adds two practical anchors. First, handing staff the instructions for use of a tool is not sufficient on its own. Second, training is the expected practical measure. The EU AI Office also publishes a living repository of AI literacy practices, first published in February 2025, with real examples of how organizations implement Article 4, useful for benchmarking your approach.
Can your company be fined for missing AI literacy training?
No company had been fined under Article 4 as of July 2026, and Article 4 breaches do not carry the AI Act's headline fines, which are reserved for other violations. Penalties for AI literacy failures are set by each Member State and must be proportionate. Enforcement sits with national market surveillance authorities, and national implementation is uneven so far: per the tracker at artificialintelligenceact.eu, roughly 9 Member States have designated their authorities, about 12 have pending proposals, and about 6 have none.
That unevenness is not a reason to wait. From 2 August 2026, an authority that receives a complaint, investigates an AI related incident, or reviews your sector can ask one simple question: what did you do to make sure your staff use AI competently? An employer with a training plan and records answers in minutes. An employer with nothing starts building its compliance story under scrutiny. AI Act compliance for employers rests on evidence of effort, and evidence is cheap to create now and hard to reconstruct later.
How do employers comply with Article 4 in practice?
Employers comply with Article 4 through a short, documented sequence that legal advisers and the European Commission converge on: map where AI is used, train people according to their role, and keep records. The table below breaks the recipe into steps you can assign this week.
| Step | What to do | What to keep on file |
|---|---|---|
| 1. Map AI use | List every AI tool in use, official or unofficial, and who uses it for what | A simple inventory of tools, teams, and use cases |
| 2. Assess roles and risk | Decide how deep training must go for each role and context | Short notes matching roles to risk levels |
| 3. Run role based training | Cover how AI works and its risks and limits, including hallucinations, data protection, and confidentiality | The course outline and delivery dates |
| 4. Record completion | Track who was trained, when, and on what content | Completion reports or certificates |
| 5. Review and refresh | Revisit training as tools, roles, and risks change | Review dates and updated materials |
For the training layer itself, our guide to AI training for employees in 2026 covers what a solid curriculum looks like, and the playbook on rolling out AI training company wide covers invitations, deadlines, and completion tracking.
Do you need certificates to prove AI literacy?
No, the EU AI Act does not require certificates, and the European Commission's Q&A confirms that internal training records are sufficient evidence. Certificates are simply the most convenient form of record: one document per employee stating what was covered and when, ideally verifiable by a third party without emailing you first.
This is where a certifying course earns its keep. Learnery is a browser based AI training platform that certifies employees in around eight hours for 39 euros per seat as a one time payment. Each seminar runs in twelve steps, from AI foundations and safe use at work through prompting, then adapts to your industry and finally to the exact subsector and role, which lines up with the proportionate, role based training Article 4 expects. Completion earns a certificate with a verifiable code anyone can check online, and the admin dashboard tracks completions and produces reports, which is exactly the documentation the compliance recipe calls for. You can create an account and invite your team by email in an afternoon.
What should a small company do before 2 August 2026?
Before 2 August 2026, a small company should complete the twelve steps above, starting with the AI use map this week. The whole sequence fits comfortably in two weeks for a team under fifty people, because the training itself is self paced and takes around eight hours per person. The cost is modest and transparent: with Learnery's volume pricing, a 15 person team costs 15 times 39 euros with 20 percent off, which is 468 euros in total, once, with no subscription. To see what the time savings from competent AI use are worth on top of the compliance benefit, run your numbers through the free ROI calculator, and if you are buying for more than one team, talk to us about volume discounts. The rule is already in force. The supervision start in August only decides whether you meet it on your schedule or on a regulator's.