Employee AI Training: Meeting the EU AI Act's Duty

The EU AI Act's AI-literacy obligation (Article 4) came into force in February 2025. It requires organisations to ensure that staff who use AI tools have a 'sufficient level of AI literacy' — enough to understand what AI does, what its limits are, and when to apply human judgment.

What 'sufficient' means in practice

There's no prescribed curriculum. The standard the regulators are aiming at is: employees should understand that AI output can be wrong and must be reviewed, that certain data should not be shared with AI tools, and that there are rules for disclosing AI-generated content. A short written briefing plus a policy acknowledgement covers the intent of the law for most employees.

How to document it

You need a record of who received the literacy training and when. The simplest form: send your AI usage policy (which includes the key literacy points) to every relevant employee and track acknowledgement. That gives you a timestamped, signed record for each person. Greenlightly's attestation module does this automatically.

Who is 'relevant staff'?

Article 4 covers all natural persons deploying AI systems within your organisation. In practice: anyone who uses an AI tool as part of their role. That is now almost everyone. Err on the side of including rather than excluding.

Annual refresh is best practice

AI tools and regulations change. An annual re-attestation cycle ensures your records stay current and that staff who joined after the initial rollout are covered. Set a calendar reminder or use Greenlightly's attestation re-send feature to close the gap.