--- title: "EU AI Act Training Obligation: What Article 4 Requires (2026)" description: "EU AI Act training obligation under Article 4: who it covers in Germany, what AI literacy measures to implement, and how to document compliance." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/compliance/ai-act-schulungspflicht/" language: "en" --- ![EU AI Act training obligation and Article 4 AI literacy in Germany](https://compound.law/assets/images/compliance/compliance_2.webp) compliance # EU AI Act Training Obligation: What Article 4 Requires (2026) 31 August 2026 Short answer The EU AI Act training obligation has applied since 2 February 2025. Article 4 requires providers and deployers to take measures that support the development of AI literacy among staff and other people operating or using AI systems on their behalf. German businesses should use proportionate, role-based guidance and retain evidence of what they implemented. - Article 4 covers providers and deployers of AI systems, including businesses using third-party AI tools. - The duty is not limited to high-risk AI, but the measures should reflect each tool, role, and use context. - The amended rule does not prescribe a course, certificate, fixed duration, or guaranteed literacy level. - German businesses should document their AI inventory, target groups, guidance, training, and review cycle. The **EU AI Act training obligation** has applied since **2 February 2025** to providers and deployers of AI systems, including German businesses that use third-party AI tools. **Article 4 of Regulation (EU) 2024/1689** requires them to take measures that support the development of **AI literacy** among staff and other people operating or using AI systems on their behalf. The appropriate response is proportionate and role-based: the law does not prescribe one course or certificate, but informal, undocumented AI use is a poor compliance strategy. The rule is broader than high-risk AI. A German company can be a deployer when its employees use generative AI for drafting, translation, coding, customer service, research, or internal analysis. Following the July 2026 amendment by [Regulation (EU) 2026/1744](https://eur-lex.europa.eu/eli/reg/2026/1744/oj), Article 4 no longer requires organisations to guarantee a specific or “sufficient” literacy level; it requires measures that **support the development** of literacy while taking account of knowledge, experience, education, training, use context, and affected people. For the wider timetable, see our [EU AI Act deadline checklist for German businesses](https://compound.law/en-DE/compliance/eu-ai-act-august-2026-deadline-checklist/). Privacy and vendor reviews should also connect the programme to [AI Act and GDPR legal advisory](https://compound.law/en-DE/compliance/ai-act-gdpr-legal-advisory/), [GDPR AI procurement](https://compound.law/en-DE/compliance/gdpr-ai-procurement/), and [EU AI Act procurement requirements for German enterprises](https://compound.law/en-DE/compliance/eu-ai-act-procurement-requirements-german-enterprises/). ## What is the EU AI Act training obligation? The phrase **AI Act training obligation** is useful shorthand, but Article 4 is not a statutory requirement to buy a particular training product. The [consolidated EU AI Act](https://eur-lex.europa.eu/eli/reg/2024/1689) requires **providers** and **deployers** to take measures supporting the development of AI literacy among their staff and other people dealing with the operation and use of AI systems on their behalf. Those measures must take account of: - the relevant people’s technical knowledge, experience, education, and training - the context in which the AI systems are used - the people or groups on whom the systems are used The definition of **AI literacy** in **Article 3(56)** remains important. It covers the skills, knowledge, and understanding that help providers, deployers, and affected people make informed AI deployments and recognise the opportunities, risks, and possible harm associated with AI. The practical result is a flexible but real governance duty. A low-impact writing assistant may call for concise safe-use rules and output checking. An AI tool used in recruitment, worker management, lending, health, or regulated customer communications demands deeper, role-specific measures. ## Key entities for AI Act implementation in Germany - **AI literacy:** Article 3(56) describes the skills, knowledge, and understanding that support informed AI deployment and awareness of opportunities, risks, and possible harm. Under the amended Article 4, providers and deployers must take measures that support its development in the relevant work context. - **Deployer obligations:** A deployer uses an AI system under its authority in a professional context. Its duties depend on the system, role, risk classification, and actual use; buying a third-party tool does not automatically transfer every AI Act responsibility to the vendor. - **Works-council co-determination for AI:** Section 87(1) no. 6 BetrVG can apply when a technical system is intended to monitor employee conduct or performance. German employers should assess the actual functions before a pilot or rollout and involve the works council where required. ## Who must comply with Article 4? Article 4 applies to both **providers** and **deployers**. A provider develops an AI system, or has one developed, and places it on the market or puts it into service under its name or trademark. A deployer uses an AI system under its authority, except for personal, non-professional activity. Most German businesses buying AI-enabled software will act as deployers. The category includes a GmbH using a third-party chatbot, a startup integrating an AI assistant into operations, an employer adopting an HR tool, and an enterprise rolling out copilots across departments. A business may also become a provider where it offers an AI system under its own name or makes changes that bring it within the provider rules. ### Staff and relevant contractors are in scope The **AI Act employee training requirement** is not limited to employees with technical job titles. The correct question is who operates, uses, supervises, selects, or relies on an AI system on the organisation’s behalf. Depending on the deployment, the relevant people can include: - managers approving AI use or relying on AI-supported decisions - HR teams using tools for recruitment, evaluation, or workforce planning - procurement teams assessing vendors and contractual safeguards - legal, privacy, risk, and compliance functions - IT, security, data, and product teams configuring systems - customer-facing teams using AI-generated recommendations or communications - contractors and service providers operating the system for the business The [European Commission’s AI literacy Q\&A](https://digital-strategy.ec.europa.eu/en/faqs/ai-literacy-questions-answers) confirms that contractors should have skills appropriate to their tasks. The company should therefore address relevant external personnel in onboarding, instructions, contractual allocation, or training rather than assuming Article 4 stops at the payroll boundary. ### The obligation is not limited to high-risk AI The **Article 4 AI Act training** duty applies to AI systems generally. The Commission specifically uses employees working with ChatGPT for advertising text or translations as an example and says they should be informed of risks such as hallucination. High-risk status still matters. A higher-impact use case normally needs more intensive literacy measures, and separate high-risk obligations may require trained human oversight. But the amended dates for high-risk compliance do not delay the already-applicable Article 4 duty. ## What does AI literacy mean in practice? Effective **EU AI Act AI literacy** combines understanding of the technology with concrete workplace rules. It should help people recognise what a system can and cannot do, use it within approved boundaries, review outputs intelligently, and escalate problems. ### Know the system and its limitations Users should understand the actual tool they work with, not merely receive a generic definition of artificial intelligence. Relevant topics include the system’s purpose, permitted use cases, data sources where known, output limitations, and recurring failure modes such as hallucination, bias, automation bias, or outdated information. This knowledge should be tailored. A developer using a coding assistant needs different examples from an HR manager reviewing a ranking, and a procurement professional needs different depth from a customer-service agent. ### Apply human oversight and escalation rules People should know when an output needs human verification, which decisions may not be delegated to a tool, and who owns exceptions. Training should explain how to report unsafe behaviour, discriminatory results, data leakage, misleading content, or a material mismatch between the approved purpose and actual use. ### Understand the legal and organisational context AI literacy does not make every employee a lawyer. It gives people enough context to spot when specialised review is required. For German businesses, this commonly includes the EU AI Act, the GDPR, confidentiality and trade-secret protection, intellectual property, sector rules, and employment-law or works-council issues. ### Use proportional, role-based measures After the 2026 amendment, Article 4 expressly avoids requiring a guaranteed level of knowledge for every individual. That makes a documented, risk-based approach more important, not less. Organisations should be able to explain why a particular group received a short guide, workshop, simulation, policy briefing, technical module, or combination of measures. ## What should companies implement now? A workable **AI literacy compliance programme in Germany** should connect training with the systems the business actually uses. ### Build and maintain an AI inventory Record approved AI systems, embedded AI features in SaaS products, pilots, and known departmental use. For each entry, note the vendor, business purpose, users, internal owner, affected people, data categories, and whether outputs influence consequential decisions. An inventory prevents generic training and reveals shadow AI. It also supplies the factual base for privacy, procurement, security, and AI Act classification work. ### Create a role-based training matrix Map each tool or use-case category to the people who use, approve, supervise, or procure it. Then define the learning objective and delivery method for each group. A useful matrix records: 1. the tool or use case 2. the relevant user and oversight roles 3. the main technical, legal, and human-impact risks 4. the required literacy measure 5. the responsible owner 6. the completion and review dates ### Put approved-use rules in writing Training is more actionable when it points to a clear internal policy. Staff should know which tools are approved, which information may not be entered, when output verification is mandatory, when an AI interaction or generated content must be disclosed, and when legal, privacy, HR, security, or works-council review is required. ### Retain proportionate evidence The Commission says Article 4 does not demand a particular certificate. Internal records are still valuable evidence that measures were selected and implemented deliberately. Retain training materials, attendance or completion records, role-specific guidance, policy acknowledgements, decision logs, named owners, and version histories. ### Establish triggers for refresh AI literacy is not a one-off project. Review the programme when the business approves a new tool, a system gains a material feature, the use case changes, an incident occurs, or legal guidance changes. A scheduled annual review can provide a baseline, but event-driven updates keep the content connected to real risks. ## How does Article 4 connect to GDPR and employment law? Article 4 is an AI Act duty, but many German deployments engage other rules at the same time. Under the **GDPR**, personal-data use may require a lawful basis, transparency, data minimisation, security, processor terms, transfer safeguards, retention rules, and sometimes a data protection impact assessment. AI literacy should translate those requirements into usable instructions—for example, whether staff may paste customer records, contracts, support tickets, or applicant data into an external model. Employee-facing AI can also raise German employment and co-determination issues. **Section 26 of the Federal Data Protection Act (BDSG)** can be relevant to employee data processing. **Section 87(1) no. 6 of the Works Constitution Act (BetrVG)** may trigger works-council participation where technical systems are intended to monitor employee behaviour or performance. Training cannot replace the necessary legal analysis or involvement of employee representatives. Procurement is the connecting control point. Vendor due diligence and contracts should tell internal teams what the tool is approved to do, what evidence the vendor provides, which configurations are required, and which responsibilities remain with the deployer. ## Deadlines, enforcement, and risk if you do nothing Article 4 has applied since **2 February 2025**. The July 2026 Digital Omnibus amended how the duty is expressed but did not remove it or reset that application date. The EU framework for supervision and enforcement has applied since **2 August 2026**, and national market-surveillance authorities can enforce Article 4 under the applicable European and national rules. In Germany, the **Bundesnetzagentur** took on a central role under the national AI market-surveillance framework in July 2026, including as a point of contact and complaints body, while established sector authorities retain responsibilities in their fields. The precise competent authority can therefore depend on the system and sector. Avoid simplistic penalty claims. Article 4 does not contain a dedicated fixed fine for missing a webinar. Enforcement measures and penalties depend on the legal basis, national rules, and facts of the case, with proportionality, severity, and negligent or intentional conduct among the relevant considerations. The more immediate business risks are practical: - staff use tools without confidentiality or data-handling boundaries - teams rely on inaccurate, biased, or misleading output without review - procurement buys an AI feature without identifying deployer responsibilities - sensitive HR or customer workflows lack escalation ownership - the company cannot evidence which Article 4 measures it selected or why An incident linked to missing guidance can make an undocumented approach substantially harder to defend. ## Article 4 compliance checklist for German businesses Use this eight-step checklist to implement the **AI Act training obligation in Germany**: 1. **Inventory every AI system.** Include approved tools, embedded features, pilots, and known departmental use. 2. **Classify each use context.** Record the purpose, affected people, data involved, and potential harm. 3. **Map relevant roles.** Identify staff, managers, oversight functions, and contractors operating on your behalf. 4. **Set role-based learning objectives.** Match the required knowledge to the tool, task, and risk. 5. **Deliver practical literacy measures.** Combine baseline awareness with tool-specific guidance where necessary. 6. **Publish use and escalation rules.** Define approved tools, prohibited inputs, human review, and escalation owners. 7. **Document implementation.** Retain materials, attendance, acknowledgements, owners, and decision records. 8. **Review and refresh.** Update measures when systems, use cases, incidents, guidance, or legal requirements change. ## Build an Article 4 programme that fits your business Compound Law advises German businesses on **EU AI Act compliance**, AI governance, procurement, GDPR overlap, and employment-sensitive deployments. We can help scope an AI inventory, design a proportionate Article 4 programme, review internal policies, and connect literacy measures with vendor and workforce governance. [Contact our team](https://compound.law/en-DE/#booking) for a focused legal review. *This guide provides general information and does not constitute legal advice. The measures required in a specific case depend on the AI system, organisational role, users, affected people, and applicable sector rules.* ## Related Compliance Guides [![GDPR-compliant AI implementation for businesses in Germany](https://compound.law/assets/images/compliance/compliance_1.webp)](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [Guides](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) ### [GDPR-Compliant AI in Germany: A Practical Guide for 2026](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [GDPR-compliant AI means a lawful basis, transparency, a DPA, controlled transfers and a DPIA where risk is high. The 2026 guide for German companies.](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [![AI legal counsel in Germany for company AI procurement](https://compound.law/assets/images/compliance/compliance_3.webp)](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) [Guides](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) ### [AI Legal Counsel in Germany for Companies](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) [AI legal counsel in Germany helps companies handle EU AI Act, GDPR, DPA, procurement, and rollout risk before signing or launching AI tools.](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) [![EU AI Act procurement before 2027 for German buyers](https://compound.law/assets/images/compliance/compliance_3.webp)](https://compound.law/en-DE/compliance/eu-ai-act-procurement-before-2027/) [compliance](https://compound.law/en-DE/compliance/eu-ai-act-procurement-before-2027/) ### [EU AI Act Procurement Before 2027 in Germany](https://compound.law/en-DE/compliance/eu-ai-act-procurement-before-2027/) [EU AI Act procurement before 2027 matters now for German buyers because contracts, evidence flows, and deployer support should be fixed before rollout.](https://compound.law/en-DE/compliance/eu-ai-act-procurement-before-2027/) ## Frequently asked questions The phrase training obligation is practical shorthand. Article 4 requires providers and deployers to take measures that support the development of AI literacy among staff and other people dealing with AI systems on their behalf. Following Regulation (EU) 2026/1744, they do not have to guarantee a particular literacy level for each individual. Start with a use-case inventory, classify provider and deployer roles, and map high-risk, transparency, and other applicable duties. Connect AI literacy measures to GDPR, DPA review, IT security, human oversight, works-council review, and incident governance. Employers should use role-based AI literacy measures, written use and escalation rules, and documented approvals. Where HR, employee data, or monitoring is involved, privacy, security, and potential co-determination under Section 87(1) no. 6 BetrVG should be assessed early. No. Article 4 applies generally to providers and deployers of AI systems. High-risk status affects the depth of the response and can trigger separate obligations, including trained human oversight, but it is not a condition for the Article 4 AI literacy duty. No. The AI Act does not prescribe an Article 4 certificate, course provider, format, or fixed duration. Measures should match the system, user role, use context, and affected people. Useful evidence can include approved materials, attendance records, role-specific guidance, policy acknowledgements, owners, and review dates. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "EU AI Act Training Obligation: What Article 4 Requires (2026)", "description": "EU AI Act training obligation under Article 4: who it covers in Germany, what AI literacy measures to implement, and how to document compliance.", "image": "https://compound.law/assets/images/compliance/compliance_2.webp", "datePublished": "2026-08-31T00:00:00.000Z", "dateModified": "2026-08-31T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/compliance/ai-act-schulungspflicht/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "Compliance Guides", "item": "https://compound.law/en-DE/compliance/" }, { "@type": "ListItem", "position": 3, "name": "EU AI Act Training Obligation: What Article 4 Requires", "item": "https://compound.law/en-DE/compliance/ai-act-schulungspflicht/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is the AI Act training obligation under Article 4?", "acceptedAnswer": { "@type": "Answer", "text": "The phrase training obligation is practical shorthand. Article 4 requires providers and deployers to take measures that support the development of AI literacy among staff and other people dealing with AI systems on their behalf. Following Regulation (EU) 2026/1744, they do not have to guarantee a particular literacy level for each individual." } }, { "@type": "Question", "name": "How should German companies implement the AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "Start with a use-case inventory, classify provider and deployer roles, and map high-risk, transparency, and other applicable duties. Connect AI literacy measures to GDPR, DPA review, IT security, human oversight, works-council review, and incident governance." } }, { "@type": "Question", "name": "What does AI Act implementation require for German employers?", "acceptedAnswer": { "@type": "Answer", "text": "Employers should use role-based AI literacy measures, written use and escalation rules, and documented approvals. Where HR, employee data, or monitoring is involved, privacy, security, and potential co-determination under Section 87(1) no. 6 BetrVG should be assessed early." } }, { "@type": "Question", "name": "Does Article 4 apply only to high-risk AI systems?", "acceptedAnswer": { "@type": "Answer", "text": "No. Article 4 applies generally to providers and deployers of AI systems. High-risk status affects the depth of the response and can trigger separate obligations, including trained human oversight, but it is not a condition for the Article 4 AI literacy duty." } }, { "@type": "Question", "name": "Does Article 4 require a certificate or fixed course?", "acceptedAnswer": { "@type": "Answer", "text": "No. The AI Act does not prescribe an Article 4 certificate, course provider, format, or fixed duration. Measures should match the system, user role, use context, and affected people. Useful evidence can include approved materials, attendance records, role-specific guidance, policy acknowledgements, owners, and review dates." } } ] } ] ```