YTYK You think you know

Card 15 of 15 Dates, penalties, and literacy ●○○ Foundational

The literacy duty nobody budgeted for

Article 4 requires providers and deployers to ensure a sufficient level of AI literacy among their staff and anyone operating AI systems on their behalf, taking account of their technical knowledge, training, and the context of use. It applies to all AI systems, at every risk tier.

Why it is like this

Every other safeguard — oversight, instructions for use, incident reporting — assumes someone who understands what they are looking at. Literacy is the precondition the legislator made explicit.

Not to be confused with

A high-risk requirement, or a formal certification. There is no prescribed curriculum and no certificate; the standard is sufficiency for the role and the context, and it is the organisation's to demonstrate.

In practice

It has applied since 2 February 2025, which makes it the one obligation most organisations are already in breach of while waiting for 2026.

Source: Regulation (EU) 2024/1689 (AI Act) — Article 4. Read on .

Predict Check yourself

An organisation uses only minimal-risk AI tools. Does the AI literacy duty apply?

  1. Yes — Article 4 is not tier-dependent; it covers staff dealing with any AI system on the organisation's behalf.
  2. No — it applies only to high-risk systems.
  3. No — it applies only to providers, not deployers.
  4. Only from 2 August 2026.
Show the answer

Yes — Article 4 is not tier-dependent; it covers staff dealing with any AI system on the organisation's behalf.

It is the broadest and earliest obligation in the regulation, and the cheapest to satisfy — which is why missing it is hard to excuse.