Are you EU AI Act
compliant?

The clock is ticking on AI Literacy compliance

Article 4 of the EU AI Act — the AI Literacy obligation — has been in force since 2 February 2025. That means the legal duty to ensure your staff have a sufficient level of AI literacy already applies to your organisation today.

But the harder deadline is coming fast. National market surveillance authorities begin supervising and enforcing Article 4 from 2 August 2026 — just months away.

Article 4 does not carry a standalone fine for simply not having a training programme in place. What it does — and this is the part that should concern every HR leader — is act as a significant aggravating factor when something goes wrong. When an AI-related incident occurs and regulators investigate, the first question they will ask is whether your people were properly trained to use that system safely. If the answer is no, your exposure under Article 99 increases substantially.

The realistic scenario for HR leaders is this: an AI tool your organisation uses causes a discriminatory outcome, a data exposure, or a flawed decision affecting an employee or customer. Regulators open an investigation. They find your staff lacked the AI literacy to identify, question or prevent it. That absence of training doesn’t just fail Article 4 — it removes your ability to argue reasonable precaution and pushes you firmly into the higher penalty bands.

AI literacy isn’t the fine. It’s your defence.

This sits squarely with HR and People leaders. If your organisation develops or deploys AI systems — and most do — you are responsible for ensuring your workforce can use them safely, responsibly, and with appropriate oversight.

What is AI Literacy?

Article 4 of the EU AI Act is where the obligation to ensure AI literacy sits. The formal definition of AI Literacy lives in Article 3(56) — the Act’s definitions article. Together, they establish both what AI Literacy means and who is legally required to ensure it. It’s not about everyone becoming an AI engineer. It’s about giving people enough understanding to engage with AI systems safely and responsibly in their role.

The European Commission is clear that there is no one-size-fits-all approach. Literacy must be tailored — to the individual’s role, their technical background, the specific AI systems they interact with, and the level of risk those systems carry. That tailored, role-based approach is exactly what ThoughtFox delivers.

Our definition of AI Literacy

• Board can interrogate an AI strategy
• Managers can identify risk
• Frontline teams can use AI tools productively

Without exposing your organisation to data, security or reputational harm. And everyone, at every level, understands where human oversight matters most.

One size does not fit all

What AI Literacy looks like for your CEO is fundamentally different from what it looks like for your payroll team. Our tiered approach delivers the right depth, in the right language, for every level of your organisation.

AI Literacy vs AI Fluency — and why both matter

These terms are often used interchangeably — but they’re not the same thing, and the difference matters for how you structure your programme.

ThoughtFox programmes are designed to take your people from Literacy to Fluency — at the pace and depth appropriate to their role. We don’t create dependency on us; we build genuine internal capability that stays with your organisation long after we’ve finished.

Where does your organisation stand?

Answer three questions honestly. There are no right or wrong answers — only useful ones. Use the notes boxes to capture anything specific, and we’ll use your responses to personalise the guide we send you.

Tell us about you

Based on your answers above, we’ll email you your free guide — How To Guide: Building AI Literacy in Your Organisation — practical, no-fluff, and matched to where you are right now.