Cyber and AI regulation · Any member of staff who uses AI tools, and the managers responsible for them
The EU AI Act and AI literacy at work
What the Act asks after the 2026 changes, how the UK differs, and the working habits that make AI safe to use.
- 2modules
- 1.5CPD hours
- 90guided minutes
- Freeto study
Start the course, free Create a free account to save progress
About this course
The EU AI Act sorts AI systems by risk: a short list of banned practices, a set of high risk uses with heavy duties, transparency rules for systems that talk to people or generate content, and everything else. Since February 2025 it has also asked organisations to attend to the AI literacy of their staff.
In July 2026 an amending regulation changed the timetable. The main duties for high risk systems now apply from December 2027 and August 2028, not August 2026. The transparency rules still applied from 2 August 2026. The literacy duty stays but is now a duty to take measures to support AI literacy. If your training material predates that, it is out of date.
The Act is not UK law, though it reaches UK organisations whose AI systems or their output are used in the EU. The UK relies on existing law, including data protection rules on automated decisions that changed in February 2026. The second module is the practical half: what any member of staff should do, and not do, with an AI tool at work.
What you will be able to do
- Describe the four levels of risk in the EU AI Act with an example of each
- State the dates that apply after the July 2026 amendment
- Explain what Article 4 now asks on AI literacy
- Explain what the transparency rules require when AI talks to people or generates content
- Say when the Act reaches an organisation in the United Kingdom
- Describe the UK approach and the rules on solely automated decisions since February 2026
- Apply five working habits to any AI tool at work
- Recognise unapproved AI use and know what to do about it
Modules
Assessment and certificate
Knowledge check after each module and a final assessment at 80 per cent, with unlimited attempts.
A digital certificate, issued the moment you have passed and paid, showing 1.5 CPD hours with a verification code. It evidences AI literacy training completed by the named person on the date shown, which an employer can keep as a record. It is not a regulated qualification, it is not legal advice, and it does not certify that any organisation complies with the EU AI Act.
Questions
Does the EU AI Act apply in the UK?
It is not UK law. It applies to a UK organisation that places an AI system on the EU market or puts one into service there, and where the output of its AI system is used in the EU. A UK firm with no EU customers, staff or users is outside it, though its own customers may still ask for evidence of training.
Did the AI literacy duty disappear in 2026?
No. It was reworded. Since the amending regulation came into force on 27 July 2026, providers and deployers must take measures to support the AI literacy of their staff and others using AI systems on their behalf. Before that the wording was to ensure a sufficient level. The duty has applied since 2 February 2025.
When do the high risk rules start now?
After the July 2026 amendment, the main duties for stand-alone high risk systems, such as those used in recruitment or education, apply from 2 December 2027. For AI built into products covered by product safety law, they apply from 2 August 2028.
Will this certificate prove my organisation complies?
No. It shows that a named person completed AI literacy training on a given date, which is useful evidence that measures were taken. Compliance depends on what your organisation does with AI, and that needs its own assessment.