The EU AI Act entered into force in August 2024, but the compliance clock has been ticking in phases: prohibitions applied in February 2025, transparency and general-purpose AI obligations through mid-2025, and the full obligations for high-risk AI systems applying from August 2026. For global employers, the practical effect is that workforce-facing AI systems are now regulated, not just recommended, and training obligations flow directly from the text.
Article 4 is the provision L&D should know first. It requires providers and deployers of AI systems to take measures to ensure a sufficient level of AI literacy among staff and others who operate or deploy these systems, considering their technical knowledge, experience, education, and training. In practice, this turns AI training from an optional upskilling initiative into a documented compliance obligation with an audit trail.
High-risk systems, including those used for recruitment, employee evaluation, and promotion decisions, carry the heaviest load: conformity assessments, human oversight requirements, and data governance obligations. The August 2026 applicability date is closer than it looks, and the assessment cycle for most enterprise systems runs six to nine months. Organizations that have not inventoried their high-risk workforce AI use are already behind.
In our compliance practice, we tell clients that AI literacy is not a one-time course; it is an annual, role-tiered program. Operators need hands-on capability; executives need accountability and escalation awareness; procurement and legal need technical fluency to review supplier attestations. We have built tiered AI literacy curricula that map to Article 4's proportionality language and produce the documented evidence regulators expect.
Finally, treat the EU AI Act as the floor, not the ceiling. The EU Digital Operational Resilience Act, GDPR, and emerging national AI laws in Germany, Spain, and the Netherlands create overlapping obligations. A single governance spine with a skills-based training matrix across all of them is cheaper and more defensible than chasing each deadline separately.