advisory / 05
AI Literacy Programme (Art. 4)
The training your staff need — and the record an auditor asks for.
Most organisations have had no AI training at all, and the duty has been in force since 2 February 2025 — for providers and for deployers, including the people affected by a system. The training is not the hard part. The record is.
The training your staff need, and the record an auditor asks for: who was trained in what, when, with which materials.
you receive
You receive: the evidence package — a role-specific curriculum, participation records, and a policy snippet naming who was trained in what. The teaching is the smaller half; the documented coverage is the deliverable.
what is fixed — the four-block curriculum and the role tiers
- 01
the curriculum is public, four blocks: what these systems are and are not → what the technique actually does, demonstrated rather than described → what the law requires, with the risk classes and the interplay with data protection → practice scenarios taken from real organisations, not invented ones
- 02
role tiers, defined before anyone is trained: all-staff awareness (90 minutes), department practitioners (half a day), leadership briefing. Who needs which depth is agreed first — that is what makes the record defensible
- 03
the duty, dated and quoted: AI literacy has applied since 2 February 2025. Art. 4(1) sets no statutory level, so the level is agreed with you rather than asserted
- 04
the evidence: participation records and a policy snippet naming who was trained in what. No certificate is issued — a certificate would claim a level the law does not define
- 05
no vendor demo inside the training. If a tool is shown at all, it is shown as an example with its limitation named
engagement shape
role-tiered, days not months: open cohorts, or in-house groups scheduled on request. The evidence package is produced per organisation, not per participant.
role-tiered — all-staff awareness (90 minutes), department practitioners (half a day), leadership briefing. Open cohorts or in-house. · open cohorts and in-house groups, scheduled on request
segment variants
- startups
- ninety minutes that stop your engineers from pasting customer data into a consumer tool
- SMB
- ninety minutes, no jargon, in German, on your own processes
- enterprise
- role tiers plus the participation record your compliance function files
- non-tech
- the plain-language block, with the practice scenarios drawn from your sector
- public administration
- aligned to the administration’s own AI guidance, with participation records rather than certificates
not for
not a keynote and not a certificate — no certificate is issued, because Art. 4(1) sets no statutory level; what you get is evidence of coverage.
the artifacts behind this format
the next step
which role needs which depth, before anyone is trained.
public administration
aligned to the administration's own AI guidance, with participation records over certificates-for-CVs.
last refreshed 2026-10-17 · reviewed quarterly
Sources: European Commission, AI Act regulatory framework (retrieved 17 October 2026).