EU AI Act Article 4 — AI Literacy
Article 4 is the EU AI Act provision most teams forget exists. It came into force on 2 February 2025 — the earliest of all EU AI Act provisions. There's no grace period. Anyone whose staff designs, deploys, or uses AI systems must show appropriate literacy.
What Article 4 requires
- 4(1) — Providers and deployers must take measures to ensure, to the best extent, a sufficient level of AI literacy of their staff and other persons dealing with the operation and use of AI systems.
- Calibration — measures must take into account technical knowledge, experience, education, and training of the persons + the context the AI system is used in + the persons or groups of persons on which the AI system is used.
Common audit failures
- Generic 1-page "AI Acceptable Use Policy" with no role-specific calibration.
- No record of who completed which module when.
- Onboarding-only — no annual refresher.
- Non-EU operations excluded from training (Article 4 applies extraterritorially).
- Contractors / agency staff / consultants excluded — Article 4 covers anyone "operating" the system on your behalf.
How MEOK covers Article 4
meok-governance-engine-mcp emits an Article 4 literacy curriculum tailored to your roles + records who completed what + when. /audit-prep-bundle (£4,950) wraps Article 4 + Articles 9/10/14/26/50/72 in a 14-day signed evidence pack.
Frequently asked
When does Article 4 apply?
Article 4 has been in force since 2 February 2025 (the earliest EU AI Act provision to take effect). It applies to providers and deployers of AI systems, plus any other person on whose behalf an AI system is operated. There is NO grace period — the obligation is live now.
What level of AI literacy is required?
Article 4 requires 'a sufficient level of AI literacy' — calibrated to the specific role of the staff member. A junior support agent needs less depth than an ML engineer. The standard is: enough to make informed decisions, recognize risks, and operate the system safely. The Commission's Q&A (April 2026) clarifies it's a risk-proportionate obligation, not a one-size-fits-all certification.
Do we need to enrol everyone in formal training?
No — but you need a defensible audit trail showing each role got literacy proportionate to its risk exposure. A 30-min onboarding module + role-specific top-ups + an annual refresher is typical for SMBs. Larger organisations should match curricula to OECD AI Literacy Framework.
Does it apply to non-EU companies?
Yes — Article 4 binds providers and deployers placing AI systems on the EU market or using them in the EU. A US SaaS with EU users is in scope. Article 113 effective-date provisions confirm this.
What's the penalty?
Article 4 obligations don't have a dedicated penalty tier — they're enforced through the general Article 99 framework. Failure to provide AI literacy can be cited as evidence of broader Article 9 risk-management failure (€15M / 3% turnover). In practice, regulators cite Article 4 as a contextual element of high-risk AI audits, not as a standalone fine driver.
Source: EU AI Act Regulation 2024/1689 Art. 4 · MEOK AI Labs · CSOAI LTD · UK Companies House 16939677