What it asks for. Providers and deployers of AI systems must take measures to ensure, to their best extent, a sufficient level of AI literacy among their staff and other persons dealing with the operation and use of AI systems on their behalf.
In practice. Measures should take into account the technical knowledge, experience, education and training of the people involved, the context in which the systems are used, and the people on whom the systems are used. This obligation has applied since 2 February 2025 and covers all AI systems, not only high-risk ones. Doing this well means role-based training for users, developers, procurement and leadership covering capabilities, limitations, risks such as hallucination and bias, and internal acceptable use rules. Evidence includes a training plan, completion records and policies that link literacy to the AI inventory.
Common gaps. Organisations often run one generic awareness module, ignore contractors and other people acting on their behalf, and keep no record of who was trained.