Article 4 AI literacy: what's actually required in 2026

What Article 4 says now

Since the July 2026 amendment, providers and deployers must 'take measures to support the development of AI literacy' among staff and others using AI on their behalf, considering each person's knowledge and the context of use.

What was removed: the duty to ensure a 'sufficient level' of literacy for every individual. The European Commission has confirmed organisations are not required to measure employees' AI knowledge or guarantee specific levels.

So is training mandatory?

No specific course, certificate, exam or hour-count is mandated. But 'take measures' is a real, enforceable duty, live since 2 August 2026, supervised by national market-surveillance authorities.

If challenged, you need to show what you considered and what you did. That's an evidence question, and the defensible evidence file looks like: an AI-system inventory with roles; a role-based needs assessment; the guidance or training materials you provided; attendance or completion records; rules for responsible use; contractor coverage; and a review process.

The practical move

Most SMEs satisfy Article 4 with a half-day effort: inventory the tools, write a one-page AI-use policy, run a short role-appropriate briefing, and keep records of all three. The record-keeping is the part that protects you: measures without evidence are invisible to a regulator.