On 23 October 2025 the Dutch data protection regulator issued further guidance on how to comply with the AI literacy requirement under the EU AI Act. The guidance covers:
- The legal requirement: As of 2 February 2025, organisations have been required to put in place measures to ensure staff are “AI-literate,” meaning they have the necessary knowledge, skills, and understanding to use AI responsibly.
- Strategic Approach: AI literacy requires a continuous, structural effort. Organisations should adopt a multi-year action plan to embed AI literacy as part of responsible AI governance, comprising:
- understanding the systems used and assessing risks and opportunities
- setting goals based on risk level
- implementation
- evaluation
- Practical Examples: The guide provides examples of the multiannual plan
The full guidance can be found here.