The AI Act: dates, tool and articles

Regulation (EU) 2024/1689 · Article 4, as amended

The Article 4 AI-literacy record: the measures per group, written down

Article 4 has applied to every provider and deployer since 2 February 2025, and as rewritten on 27 July 2026 it asks for measures that fit the people and the context, not a guaranteed level. The record is a table of groups and measures. Fill it in and the page writes the document, with the amended paragraph quoted and the clauses it lives under. Nothing you type leaves this page.

Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training and the context the AI systems are to be used in, and considering the persons or groups of persons on whom the AI systems are to be used. This obligation does not require providers or deployers to guarantee any specific level of AI literacy of any individual.

Article 4(1), as replaced with effect from 27 July 2026

Who operates AI on your behalf, and the measure for each

One row per group of people with the same systems and context: the article asks that the measure take account of their knowledge, experience, education and training and of the context of use, so a group is people for whom the same measure fits. Staff and contractors both count.

Rows still without a measure or an owner: Engineering, Business users, People assigned human oversight. The article is a duty to take measures, so a group without one is where the record is thin.

The record

# AI-literacy measures under Article 4

Prepared on  under Article 4 of Regulation (EU) 2024/1689 as replaced by Regulation (EU) 2026/1744 with effect from 27 July 2026, read in the Official Journal on 12 September 2026. Not legal advice.

## The obligation, in the Regulation's words

> Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training and the context the AI systems are to be used in, and considering the persons or groups of persons on whom the AI systems are to be used. This obligation does not require providers or deployers to guarantee any specific level of AI literacy of any individual.

## The measures, per group

| Group | Systems they operate | Context of use | Prior knowledge | Measure | When | Owner |
|---|---|---|---|---|---|---|
| Engineering | [to complete] | [to complete] | [to complete] | [to complete] | [to complete] | [to complete] |
| Business users | [to complete] | [to complete] | [to complete] | [to complete] | [to complete] | [to complete] |
| People assigned human oversight | [to complete] | [to complete] | [to complete] | [to complete] | [to complete] | [to complete] |

Groups still without a measure or an owner: Engineering, Business users, People assigned human oversight.

## What this record does not claim

The measures support the development of AI literacy of the people named; Article 4(1) does not require the organisation to guarantee any specific level of AI literacy of any individual, and this record makes no such claim. Where a high-risk system is deployed, the persons assigned human oversight are named above with their measure (Article 26(2)).

## Review

Next review: [to set].

The record is revisited when a new AI system is put into use, when the intended purpose of a system changes, when a new group of people starts operating a system, and when the Commission publishes practical examples under Article 4(2) or the AI Board recommendations under Article 4(3).

## Where the record lives

In an ISO/IEC 42001 management system this table is the competence record of clause 7.2 and the awareness record of clause 7.3, and the people and skills each AI system depends on under control A.4.6; the measures are the training the organisation determined as necessary and the evidence it was received.

This document is a record skeleton written from the text of Article 4 against the rows given. It is not legal advice; the Commission's practical examples under Article 4(2) are the reference for what fits.

The competence record is one an ISO 42001 system keeps by design

StandardOS keeps the clause 7.2 and 7.3 records per person and per system, with the measure, the date and the owner, next to the impact assessment and the incident record, in six languages. This table goes in as the first record.

Article 4 as rewritten: what it asks and does not askIs your system high-risk? The determination