AI & agent safety training for your staff

EU AI Act Article 4: AI literacy

Article 4 of the Regulation (EU) 2024/1689 (Artificial Intelligence Act) covers AI literacy. It has applied since 2 February 2025 (Article 113(a)) to providers and deployers of AI systems, which includes any organisation whose staff use AI tools at work.

The Regulation (EU) 2026/1744 (Digital Omnibus on AI), in force since 27 July 2026, rewrote Article 4: providers and deployers must take measures to support the development of AI literacy of their staff and other people dealing with AI systems on their behalf. It doesn't require them to guarantee any individual's level of AI literacy.

So what counts is showing the measures you took: training that fits how your people use AI, clear rules, and a record of who completed it. The pack gives you all three. It supports your compliance work; it doesn't certify compliance and isn't legal advice.

Official texts on EUR-Lex, checked 28 September 2026.

What the training covers

1. Using AI tools safely (8 min)
   • Use only the AI tools your organisation has approved, signed in with your work account.
   • AI output can be wrong, invented or out of date. Check facts, figures, names and links before you use them.
   • 4 more points, a do and a don't, and speaker notes in the pack
2. What not to paste into AI tools (7 min)
   • Never paste passwords, API keys, access tokens or recovery codes into any AI tool.
   • Keep personal data (customers, staff, patients, candidates) out of AI tools that aren't approved for it.
   • 4 more points, a do and a don't, and speaker notes in the pack
3. Spotting prompt injection (8 min)
   • Prompt injection is text written to make an AI tool follow the attacker's instructions instead of yours.
   • It can hide in emails, documents, web pages, calendar invites, tickets and even image text that an AI assistant reads for you.
   • 4 more points, a do and a don't, and speaker notes in the pack
4. AI agents and approvals (8 min)
   • An AI agent doesn't just answer; it acts: it sends, books, buys, changes records and calls other systems.
   • Every agent needs a named owner who knows what it can do and can switch it off.
   • 4 more points, a do and a don't, and speaker notes in the pack
5. Deepfake and voice-clone payment scams (7 min)
   • A few seconds of someone's voice or video is enough to clone it. A familiar voice or face no longer proves who is calling.
   • Scams create urgency and secrecy: an urgent transfer, a new supplier bank account, a confidential deal.
   • 4 more points, a do and a don't, and speaker notes in the pack
6. Our AI rules and how to report (5 min)
   • Know where our AI acceptable use rules are, and which tools are approved for which data.
   • Ask before using AI for something new; the answer is usually yes with the right settings.
   • 4 more points, a do and a don't, and speaker notes in the pack

What's in the pack

• Training deck: 6 modules with speaker notes (PowerPoint)
• 18-question quiz with answer key, pass mark 80% (Word, and in the workbook)
• Completion certificate to copy or mail-merge (Word)
• AI acceptable use rules on one page (Word)
• Completion log: pass, certificate, next due and overdue for every person, plus an AI literacy measures record and summary (Excel, exports to CSV)

Questions