Learning · Artificial intelligence

AI Literacy for the EU AI Act, Defensibly Done

From 2 August 2026, “we sent everyone a video” stops being a defensible answer.

The EU AI Act requires organisations that deploy AI, not just those that build it, to support a sufficient level of AI literacy among the people who use it. There is no certificate that makes you compliant. What counts is whether you can show what you did, for whom, and why it was proportionate. Cprime builds that capability across EMEA, and leaves you the evidence.

Product Academy Feature 5

Three ways to close the gap

Whether you need a fast defensible position, a full capability build, or a board that agrees on what happens next, start where the pressure is.

Readiness review

Readiness review

A short assessment with a practitioner: which AI systems are in use, who is exposed, and what evidence you would have if you were asked next month. You keep the written gap assessment either way.

The literacy programme

The literacy programme

Map, train, evidence, refresh. Role-differentiated AI literacy for everyone who touches AI, delivered across distributed teams and varied regulatory contexts, with the documentation built in as you go.

Executive AI alignment

Executive AI alignment

A one-day working session for leaders with P&L responsibility. Prioritised AI initiatives, named owners, and a governance roadmap your risk committee can actually follow.

What Article 4 actually requires, and what it doesn't

You will be told, loudly, that AI training is now mandatory and that non-compliance means fines. That is not what the regulation says, and your General Counsel will know it. Here is the honest version, because getting this wrong in front of your legal team costs more than it wins.

What we won't tell you

“It’s mandatory training, or you’ll be fined.” There is no direct financial penalty attached to the AI literacy article, and no mandated course, format or certification.

“Buy this certificate and you’re compliant.” No training product confers compliance. The Commission has been explicit that adopting someone else’s programme grants you nothing automatically.

“Everyone needs the same course.” A blanket, one-size-fits-all rollout is precisely what the guidance suggests is unlikely to be adequate.

What is actually true

The duty is live and broad. It applies to organisations that deploy AI, not only those that build it, which catches almost everyone, including HR teams using AI screening tools.

It reaches beyond the EU. Like GDPR, it applies where your AI systems or their outputs affect the EU market, regardless of where you are headquartered.

It is judged on evidence and proportionality. Differentiated by role and risk, documented, and kept current. That is a training and documentation problem, and it is one we are built for.

The programme

Map it, train it, evidence it, keep it current

Compliance is a sequence, not a course. We work through it in four stages so the documentation is a by-product of the work rather than a scramble afterwards.

  • Map: Which AI systems are actually in use, who touches them, at what risk level, including contractors. Most organisations find more than they expected.
  • Differentiate: Role-based literacy calibrated to what each group does. A data scientist, a recruiter and a board director do not need the same training.
  • Evidence: who was trained, on what, why it was proportionate, and when it gets refreshed.
  • Refresh: A fixed cadence, so the file does not quietly go stale.

 

Typically six to eight weeks from kick-off to a completed evidence pack.

Learning_Generative_AI-min
The deliverable

We don't leave you with a completion rate. We leave you with the file.

Attendance data proves people turned up. It does not answer the question a market surveillance authority or an internal auditor will actually ask.

  • AI system and role inventory, mapped to risk
  • Role-differentiated training records: who, what, when
  • Written rationale for why this approach was proportionate for your organisation
  • Course materials, retained and versioned
  • Refresh schedule with a named owner
  • Board-ready summary for your risk committee

 

 

Learning_Data
Built for EMEA reality

Distributed teams, varied regulatory contexts, different levels of maturity

Across EMEA, organisations operate with teams spread over multiple jurisdictions and very different levels of AI maturity. A single global rollout tends to be too much for one group and not enough for another, which is exactly the proportionality problem the Act is concerned with.

  • Delivered in person and virtually across regions and time zones
  • Adapted to local regulatory context and existing governance
  • Aligned to the roles and decision flows your organisation actually has
  • Available through Learning Academies and prepaid learning credits
Learning_Product
Beyond compliance

Compliance is the floor. Adoption is the point.

Literacy training is where most AI programmes stop, and it is precisely where they stall. People come away knowing what AI is, while nothing about how work actually gets done has changed. Do only the compliance piece and you will be defensible and no more productive.

  • Move from fluency to applied adoption in live initiatives
  • Give leaders a governance model they will genuinely use
  • Connect AI capability to the operating model and toolchain around it
Rovo Intelligence

Where it goes after literacy

Start anywhere on the pathway. Just know that fluency is the on-ramp, not the destination. The value shows up when AI changes how decisions get made.

Role-based AI essentials

Entry · 1 day

Applied AI for Scrum Masters, Product Owners and delivery roles. Lifetime certification, no renewal fee.

AI-Native Foundations

Fluency · 2 days

Confident, responsible AI use across business, product and delivery roles. The literacy tier, done properly.

AI-Native Organization

Leadership · 1 day

The Regulation

What the Act says, in plain terms

EU AI Act, Article 4: AI literacy

  • WHO: Providers and deployers of AI systems, including organisations outside the EU whose systems or outputs affect the EU market.
  • WHAT: Take measures to support a sufficient level of AI literacy among staff and others operating AI on your behalf, proportionate to their role, knowledge and context of use.
  • SINCE: The obligation has applied since 2 February 2025.
  • ENFORCED: National market surveillance authorities begin supervision from 2 August 2026. Penalties are set under national law and must be proportionate.
  • CHANGING: The Digital Omnibus has softened the wording, from ensuring a level of literacy to taking measures to support its development. This is an obligation of effort rather than of result.
AdobeStock_600306097_cutout
Resources to explore

Insights from the field

Perspectives on AI capability, adoption and governance drawn from real client work across EMEA.

Find out where you actually stand

A short review with a practitioner: which AI systems are in use, who is exposed, and what evidence you would have if you were asked next month. You will get a written gap assessment whether or not you go further with us.