AI literacy requirements for micro-enterprises (1–30 employees)

The AI literacy requirement applies to all companies using artificial intelligence - including micro-enterprises with 1 - 30 employees - and has been in force since 2 February 2025. This means that if your employees use ChatGPT, Copilot, AI translation, image generation, or any other AI tool for work purposes, the company must support and promote the development of AI literacy among these individuals, taking into account their knowledge, experience, training, the context of use, and the people affected. This requirement stems from Article 4 of the EU AI Act (Regulation (EU) 2024/1689). There are no exceptions based on company size: the same principle applies to both a 200-employee corporation and a three-person accounting firm.

The good news for small businesses is that the requirement is proportional. You are not expected to do the same as a large tech company. For a micro-enterprise, it is sufficient to clearly demonstrate which AI tools are used, what rules employees are aware of, and how their AI literacy development and verification are documented.

What is AI literacy under the EU AI Act?

AI literacy refers to the skills, knowledge, and understanding that enable your employees to consciously use AI systems and comprehend their opportunities and risks. This includes:

• understanding how AI tools work and why they sometimes make mistakes (so-called "hallucinations");
• the ability to recognise when AI results can be trusted and when human verification is necessary;
• knowledge of what data must not be entered into AI tools (personal data, trade secrets, client information);
• understanding the impact of AI on specific jobs and sectors.

If you want a deeper explanation of what exactly constitutes AI literacy, read the separate article AI literacy - what it is and why it matters. Importantly: Article 4 does not require employees to become AI engineers or achieve a specific "sufficient" level of literacy. It requires a basic, work-related understanding. The choice of tools (e.g., a set of documents, certificates, training hours, external trainers, or a dedicated AI officer) is not universally mandated - it depends on the company’s needs and context.

A practical example: if your accountant uses AI to process invoices, they do not need to know how a language model is trained. They need to know that AI might incorrectly read an amount, so every result must be verified, and that client personal codes must not be entered into a free tool. This is what proportional, duty-related AI literacy looks like - concrete, not theoretical.

Does the AI Act really apply to small businesses?

Yes. The EU AI Act applies to small businesses in exactly the same way as to any other entity. Article 4 refers to "deployers" - any entity using an AI system in its operations. A micro-enterprise using ChatGPT to write proposals is a deployer. See who the EU AI Act applies to if you are unsure about your status.

Many owners mistakenly believe that the requirements only apply to those who develop AI. This is not true - the greatest burden of obligations falls on users. However, for micro-enterprises, the requirement is proportional to their risk and scale. A three-person company does not need a formal training department or a dedicated AI compliance officer.

It is also worth noting that the AI literacy obligation has no minimum employee threshold. Even if a company has only one person - the owner themselves - and they use AI for business purposes, the requirement still applies. The smaller the company, the simpler the implementation can be, but the obligation itself does not disappear. In practice, this means that even a solo entrepreneur should have at least a brief record showing that they understand the risks of the AI tools they use and comply with basic safe usage rules.

When did the AI literacy requirement become mandatory?

Here are the key dates of the EU AI Act relevant to micro-enterprises:

In other words, the AI literacy requirement is already in force - it is not a future obligation. If your company uses AI today and employees have not been given the opportunity to develop AI literacy, you are formally in a state of non-compliance. For a detailed explanation of all EU AI Act deadlines, see the separate article.

What exactly should a micro-enterprise do?

The practical implementation of Article 4 for a micro-enterprise can be broken down into five steps:

1. Inventory AI tools. List which AI tools your employees actually use - even if it’s just the free version of ChatGPT on their phones. The AI tools register can help with this. Often, it turns out that so-called shadow AI is being used - tools that management was unaware of.
2. Develop employee AI literacy. Organise proportional AI literacy training with knowledge checks. For more details, see the article AI literacy training for employees. This training is not a mandatory legal minimum or a guarantee of compliance - it is a practical measure to demonstrate that steps have been taken.
3. Establish usage rules. Create a short AI usage policy that defines what is and isn’t allowed with AI.
4. Document compliance in writing. The EU AI Act does not have a separate "certificate", but an auditor will need evidence that training has taken place and that rules exist. Our recommended documents (e.g., training tests, certificates) are practical evidence, not mandatory legal requirements.
5. Update periodically. AI tools and rules change, so documentation should be reviewed regularly.

You can manage the entire process using the AI deployment checklist. If any link doesn’t work, you can always browse the list of all articles to find the topic you need.

What kind of AI training is suitable for a small business?

AI training for small businesses should be short, practical, and tailored to real work - not an abstract academic lecture. Good training for micro-enterprises includes:

• a basic explanation of AI operating principles in simple language;
• concrete examples from your sector (e.g., how to use ChatGPT in a company safely, or what risks arise from using AI tools in accounting);
• clear rules regarding personal data and GDPR (e.g., not all AI tools are banned under GDPR - the lawful basis, data minimisation, tool reliability, and safeguards must be assessed; bans apply only to undefined public tools without appropriate safeguards);
• a knowledge check (test) that proves the employee understood the material;
• a certificate recording completion of the training.

The most important detail for small businesses is that training must leave a trace. Simply telling employees "be careful with ChatGPT" is not enough. An auditor needs visible evidence: who, when, and what was trained on, and that the material was understood. Knowledge checks and certificates can help document learning activities, but Article 4 does not prescribe either and neither guarantees compliance.

If you just want to try it out, nebedirbam.lt offers free AI literacy training with knowledge checks - a good way to see what proportional training for a micro-enterprise looks like before deciding on full documentation. The free path is for one signed-in participant; team training is included in the paid documentation package.

How much does this cost, and do I need a lawyer?

A lawyer is generally not needed for this requirement. Article 4 does not require complex legal assessment - it requires practical training and organisation. For most micro-enterprises, a full compliance package is standard and repetitive, so it can be prepared automatically using templates (our documents are generated automatically from professionally reviewed templates, using the company’s answers). How to do this without an expensive consultant is explained in the article Do you need a lawyer for AI compliance?.

This is exactly what nebedirbam.lt is for: the service automatically prepares a full compliance package for a fixed €149 + VAT (€299) - including an AI usage policy, AI tools register, compliance record, employee AI guide, and AI literacy training with knowledge checks and certificates. This package does not guarantee legal compliance but helps create the necessary evidence. Practical tools supporting your Article 4 measures, in one place, without human intervention and without hourly consultation fees.

What happens if I don’t comply with the requirement?

While Article 4 itself does not have a separate penalty tariff, AI literacy is a horizontal requirement - it becomes the basis for assessing whether a company uses AI responsibly overall. Non-compliance increases the risk of violating other provisions (e.g., prohibited practices or data protection). Read more about possible AI Act fines and risks separately.

For micro-enterprises, the most realistic threat is not a huge fine - it is more likely to be questions from clients or partners about compliance (proof of compliance is increasingly requested in public and private procurement) as well as reputational and data leakage risks if employees use AI unsafely.

A concrete example from practice: a larger company announces a tender for services, and among the supplier evaluation criteria, it includes AI usage compliance. A small service provider with no AI documentation or training certificates is at a disadvantage compared to a competitor who can provide a prepared policy and employee certificates. In such cases, compliance becomes not just a legal obligation but also a competitive advantage.

What to do today?

A short action plan for micro-enterprises that have not yet done anything:

• within a week, list which AI tools employees use;
• organise short AI literacy training with a test (you can start with free training);
• create an AI usage policy and document compliance in writing;
• schedule a review every six months.

The AI literacy requirement for micro-enterprises is not a bureaucratic nightmare - it is a few clear steps that can be completed quickly and inexpensively. The most important thing is to start, as the requirement has been in force since February 2025, and its implementation is left to the employers themselves.

---

For the official text of Article 4 and the updated AI Act implementation timeline, see the EU AI Act Service Desk and the European Commission’s Digital Strategy portal.