Article 4 of the EU AI Act has applied since February 2, 2025. Providers and deployers of AI systems must take measures to support the AI literacy of people working with those systems on their behalf. This can include a company using ready-made tools such as ChatGPT to draft copy. The European Commission explains that the law does not prescribe a particular certificate, curriculum or single mandatory level of knowledge.
Our AI Act 2026 overview covers transparency and the postponement of other rules. For literacy, start with the systems your business actually uses and the risks they create.
Who Article 4 covers
Providers and deployers must take measures for employees and others working with AI systems on their behalf. A marketing team using generative AI should understand fact checking and confidential data. Staff overseeing a customer chatbot need to know its limitations and when to hand a question to a person. AI used in recruitment carries greater risks and calls for more detailed procedures and specialist assessment.
The Digital Omnibus amendments retain the duty to support AI literacy but do not prescribe one “sufficient” level for everyone. Measures should fit the people, tools and context. The Commission's FAQ expressly includes staff using ChatGPT for advertising copy or translations.
A simple approach for a smaller business
1. Map tools and users. List where the team uses AI and who relies on its output.
2. Identify risks by role. Marketing may face inaccurate claims and confidential data; HR may also affect applicants.
3. Choose proportionate measures. A short training session, rules for inputs, output checks and escalation can be a starting point. The scope must fit the actual use; attending one workshop does not guarantee compliance.
4. Record and review your measures. Keep your internal guidance, training topics and review date. The Commission does not require a certificate, but an internal record can show what you did.
The practical aim is for staff to know where AI can fail, what data they must protect and who checks the result.
Oversight and penalties
National supervision and enforcement rules apply from August 2026. According to the European Commission, national authorities can address Article 4 infringements under national penalty rules and must act proportionately. Article 4 should therefore not be reduced to an automatic €15 million fine. The Czech Telecommunication Office created an AI unit; its specific powers depend on Czech legislation.
Frequently asked questions
An AI audit can map your tools, roles and practical risks. Consult a legal specialist for advice on a specific legal case.
Free consultationI build AI solutions for businesses — from chatbots to knowledge systems. I write about what actually works, no buzzwords. More about me →