Article 4: AI literacy
Article 4 has applied since 2 February 2025 and was amended on 27 July 2026. Providers and deployers must take measures that support the development of AI literacy, taking account of knowledge, experience, education, context of use and impact. They do not have to guarantee a specific individual level.
Praxikon tracks Article 4 (AI literacy) under the EU AI Act, citing the source for every statement.
Article 4 of the EU AI Act has applied since 2 February 2025. Since 27 July 2026, providers and deployers must take measures to support the development of AI literacy. Those measures should reflect technical knowledge, experience, education, the context of use and affected persons. The law does not require a specific individual level, standard course or certificate.
Legally reviewed on 30 July 2026 · Zahed Ashkara
Official text
Source: EUR-Lex, Regulation (EU) 2026/1744. Amended text of Article 4 reproduced.
View amending regulation →Decision tree
What does Article 4 require of your organisation?
Article 4 requires measures that support the AI literacy of your people, suited to their role and the context. It does not prescribe a course, certificate or test.
Question 1 · Art. 4(1) · Art. 3(1)
Does your organisation develop, supply or use one or more AI systems, including a chatbot or an AI feature in office software?
Full diagram
- 1
Does your organisation develop, supply or use one or more AI systems, including a chatbot or an AI feature in office software?
Art. 4(1) · Art. 3(1)
- Yes → Question 2
- No → Outcome A
- 2
Is it only use by yourself as a natural person, for a purely personal, non-professional activity?
Art. 3(4) · Art. 2(10)
- Yes → Outcome B
- No, it is professional → Question 3
- 3
What is your role regarding the AI system?
Art. 4(1) · Art. 3(3) en 4
- Provider → Question 4
- Deployer → Question 4
- Only importer or distributor → Outcome C
- 4
Do you know which staff members and which other persons deal with the AI systems on your behalf, such as contractors or service providers, and in which context?
Art. 4(1)
- Yes → Question 5
- No, not yet → Outcome D
- 5
Have you taken measures per role or group that fit their technical knowledge, experience, education and training, the context of use and the persons on whom the systems are used?
Art. 4(1)
- Yes → Question 6
- No, or only generic → Outcome E
- 6
Can you show which measures you took, for whom, when, and how you review them periodically?
Art. 4(1)
- Yes → Question 7
- No → Outcome F
- 7
Do you also use or supply a high-risk AI system?
Art. 26(2) · art. 14
- Yes → Outcome H
- No → Outcome G
Outcome A · Does not apply
Article 4 does not apply to you now
Without an AI system you are not a provider or deployer and Article 4 does not apply. Do check your software: AI features often sit in existing packages.
Art. 4(1) · Art. 3(1)
Outcome B · Does not apply
No obligation for purely personal use
A person using an AI system for a purely personal, non-professional activity is not a deployer. Article 4 then does not apply.
Art. 3(4) · Art. 2(10)
Outcome C · Does not apply
Article 4 only names providers and deployers
If you are only an importer or distributor, Article 4 does not rest on you. If your organisation also uses AI systems itself, you are a deployer for that use.
Art. 4(1) · Art. 3(4) · Art. 3(6) · Art. 3(7)
Outcome D · Applies
Article 4 applies: start with an overview
The obligation has applied since 2 February 2025, in its current wording since 27 July 2026. Without an overview of systems, roles and context you cannot choose suitable measures.
Art. 4(1) · art. 113 onder a
Outcome E · Applies
Article 4 applies: take measures per role
You must take measures that support the development of AI literacy, taking into account knowledge, experience, education and context. You need not guarantee any individual level. A certificate, minimum number of hours or test is not prescribed.
Art. 4(1)
Outcome F · Partly applies
Measures taken, but not yet demonstrable
You demonstrate an obligation to take measures with a record of the measures taken. The law prescribes no format; an internal record per role is a practical way.
Art. 4(1)
Outcome G · Applies
You comply with Article 4 in principle
Keep the record up to date for new systems, new roles and new people. The Commission publishes practical examples of compliance; use them as a benchmark.
Art. 4(1) · Art. 4(2)
Outcome H · Partly applies
Article 4 in order; human oversight requires more
For high-risk systems the obligations go further than Article 4. The provider designs the system so that effective human oversight is possible (Article 14). The deployer assigns human oversight to persons with the necessary competence, training and authority (Article 26(2)). For Annex III systems these obligations apply from 2 December 2027, for systems under Annex I from 2 August 2028.
Art. 4(1) · Art. 26(2) · art. 14 · art. 113 onder c
Official guidance on this article
8- Regulation (EU) 2026/1744, Digital Omnibus on AIAmends Article 4 into a duty for providers and deployers to take measures that support the development of AI literacy.PublishedRegulationEuropean Parliament and Council of the European Union24 Jul 2026
- Repository of AI literacy practicesProvides concrete examples of measures by which organisations give substance to the duty to take measures on AI literacy, with the explicit caveat that copying does not give rise to a presumption of compliancePublishedGuidelinesEuropean Commission / AI Office27 Jul 2026
- AI PactContains the commitment to promote AI literacy amongst staff and provides related explanatory material via webinarsPublishedCode of practiceEuropean Commission / AI Office7 Aug 2026
- AI Literacy - Questions & AnswersProvides the only official Commission explanation of what an organisation must concretely do to meet the duty to take measures on AI literacyPublishedQ&AEuropean Commission, DG CONNECT27 Jul 2026
- EN ISO/IEC 42001:2026 Information technology - Artificial intelligence - Management systemProvides an organisation-wide structure for roles, competencies and awareness with which the obligation to take action on AI literacy under Article 4 can demonstrably be fulfilledPublishedStandardISO/IEC JTC 1/SC 42, European adoption through CEN-CENELEC, Dutch adoption by NEN1 Mar 2026
- AI Regulation timeline (Algoritmekader)Places the AI literacy obligation on 2 February 2025 and links it to requirement aia-01 with corresponding measures.PublishedNational guidanceMinistry of the Interior and Kingdom Relations (Algorithm Framework)17 Jul 2025
- Building further on AI literacyTranslates the open standard in Article 4 into a concrete multi-year action plan, and makes clear that the obligation concerns taking measures and not a prescribed training level per employee.PublishedGuidelinesDutch Data Protection Authority (AP)23 Oct 2025
- Work agenda for coordinating AI and algorithm supervision 2026Names promoting AI literacy as one of the five substantive priorities for 2026.PublishedNational guidanceDutch Data Protection Authority (AP), Algorithm Coordination Directorate26 Mar 2026
What does this mean for you?
Provider+
Deployer+
SME / Startup+
Public Sector+
Related tools
Related enforcement
No enforcement actions for this article yet. Follow developments via the Enforcement Tracker.
Related blog posts
Cross-references
Frequently asked questions
What is AI literacy under the AI Act?+
Who does the AI literacy obligation apply to?+
When does Article 4 on AI literacy apply?+
Does everyone need to reach the same AI literacy level?+
Is a specific AI literacy training mandatory?+
How should Article 4 measures be documented?+
Is a certificate mandatory under Article 4?+
Is there a fixed Article 4 fine?+
Does the AI literacy obligation apply if I only use ChatGPT or Copilot?+
What Article 4 requires in practice
Connections
What connects to Article 4 AI Act
Themes where this returns
The counterpart in the other law
- Article 37 GDPR: Designation of the data protection officer
via Knowledge in the organisation: data protection officer and AI literacy
- Article 38 GDPR: Position of the data protection officer
via Knowledge in the organisation: data protection officer and AI literacy
- Article 39 GDPR: Tasks of the data protection officer
via Knowledge in the organisation: data protection officer and AI literacy