The EU AI Act in brief
The EU Artificial Intelligence Act (Regulation (EU) 2024/1689) entered into force on 1 August 2024. It regulates AI according to risk:
- Prohibited practices: AI uses considered an unacceptable risk.
- High-risk AI systems: subject to requirements such as risk management, data governance, documentation, human oversight, accuracy and security.
- Transparency obligations: for example, informing people when they interact with an AI system or when content is AI-generated.
- General-purpose AI models: specific obligations for their providers.
It applies to organizations that provide or deploy AI systems in the EU, and can also apply to organizations outside the EU when their AI systems or outputs are used in the EU.
The regulation enforces an extraterritorial reach similar to the GDPR: non-EU entities placing AI systems on the EU market or whose AI system outputs are utilized within the European Union fall strictly within its enforcement scope.
Key dates
| 2 February 2025 | Prohibited practices and the AI literacy obligation (Article 4) apply. |
|---|---|
| 2 August 2025 | Obligations for general-purpose AI models and the governance framework apply. |
| 2 August 2026 | General enforcement across high-risk AI systems defined under Annex III (including employment, biometric identification, critical infrastructure, and credit scoring). |
| 2 August 2027 | Obligations apply to high-risk AI systems embedded as safety components in products covered by existing Union harmonization legislation (Annex I). |
The AI literacy duty
Article 4 requires providers and deployers of AI systems to take measures to ensure, to their best extent, a sufficient level of AI literacy among their staff and other people dealing with AI systems on their behalf, taking into account their technical knowledge, experience, education and training, and the context in which the systems are used. In practice, this makes role-appropriate AI training part of compliance.
Who needs to learn what
| Role | What they need to understand | Relevant EduCut.ai courses |
|---|---|---|
| All staff using AI | What AI can and cannot do, responsible use, and what information must not be shared with AI tools. | Responsible AI Fundamentals · AI Productivity Fundamentals |
| Leadership | Accountability, risk appetite, governance structures and decision rights for AI. | Responsible AI, Ethics & Governance · AI Governance Fundamentals |
| Compliance, legal and risk | The regulatory landscape, risk classification, impact assessment, policies and evidence. | AI Regulations, Laws & Global Compliance · AI Risk Management & Impact Assessment · AI Policies, Standards & Internal Controls · AI Regulation, Compliance & Standards |
| AI owners and technical teams | AI inventories and lifecycle governance, documentation, human oversight, security and monitoring. | AI Inventory, Classification & Lifecycle Governance · AI Audit, Monitoring & Governance Evidence · AI Security Fundamentals |
| Procurement | Due diligence, contractual requirements and ongoing oversight of AI vendors. | AI Vendor & Third-Party Governance |
This role-differentiated curriculum structure guarantees that legal and compliance teams acquire audit-grade risk assessment methodologies, technical engineering squads master model inventory and testing controls, and front-line employees understand boundaries for confidential data ingestion.
Building an AI literacy program
- Map who uses or oversees AI. Start from an inventory of AI systems and the people who operate, use or supervise them.
- Set the level by role and context. The duty is proportionate: what a customer-service agent needs differs from what an AI engineer or a compliance officer needs.
- Train, and keep records. Document who was trained on what, and review it as systems and roles change.
- Connect training to governance. Policies, risk assessments and oversight only work if people understand them.
Training supports compliance but does not by itself make an organization compliant. Book a free consultation to build a role-based AI literacy plan, or explore the AI Governance courses.