Art. 4 has applied since February 2025 and binds providers and deployers whatever the risk tier. Curriculum for eight roles, a training register, and coverage that recalculates.
Delivered by email immediately after payment. Excel file, one named user.
Art. 4 is the obligation everyone already owes and almost nobody evidences.
It has applied since 2 February 2025. It binds providers and deployers. It does not care what tier your systems are in. And the Digital Omnibus softened its wording — from "shall ensure a sufficient level" to "shall take measures to support" — without removing it.
Not a slide deck. A record: which roles were trained, on what, and when. That is what this file is.
The reason literacy programmes stall is that they are designed as one course for everyone, which is simultaneously too much for most staff and too little for the people who need it. The curriculum here splits eight roles:
For high-risk deployers the bar is higher than Art. 4. The people assigned to human oversight must have competence, training and the authority to intervene. A trained overseer who cannot overrule the model does not satisfy Art. 26(2) — and that is the failure automation bias produces on its own, quietly, over months.
The AI Act Fundamentals course on this site is free and covers the "All staff" row and much of "Compliance and risk". Its exam issues a certificate with a public verification id you can file straight into the register.
Is your organisation subject to both the AI Act and DORA? The two regulations intersect on the operational resilience of financial AI systems. Our sister site regulation-dora.eu covers DORA in depth — including what the AI Act adds on top of an existing DORA programme.
The AI Act for financial institutions ↗ Explore regulation-dora.eu ↗Yes. The Omnibus softened the wording from 'shall ensure a sufficient level' to 'shall take measures to support' AI literacy, but the obligation stands and has applied since 2 February 2025 to both providers and deployers.
Yes. Art. 4 is independent of the risk tier. It applies to providers and deployers of any AI system, which in practice means almost every organisation using AI professionally.
It goes further than Art. 4: the people assigned to human oversight must have the competence, the training AND the authority to intervene. An overseer who cannot overrule the model does not satisfy it.