What you will achieve now
A decision or applied test related to “AI literacy for SMEs: inventory and internal policy.”
- 1 Understand the criterion
- 2 Do a small practice exercise
- 3 Save a piece of evidence
A brief note with what you did, what went well, what failed, and what you would review afterward.
- Inventory real AI uses by task and role.
- Assign a responsible person and a minimum review.
- Draft a one-page internal policy without promising automatic compliance.
What AI literacy means
Article 4 of the European AI Regulation requires providers and deployers to adopt measures so that people who operate AI systems have a sufficient level of literacy, taking into account their knowledge, experience, training, context, and the groups affected. The European Commission clarifies that there is no single course or universal certificate: training must be proportional to the use and the risk.
This lesson is educational, not legal advice. Check how the rule applies with your data protection officer or local advisor.
Ten-minute inventory
For each use, record: task, tool/model, data entered, output, person who reviews, effect of the output, risk, and review date. Include everyday uses such as drafting, translating, summarizing, or classifying; do not limit the inventory to projects labeled “AI.”
Minimum policy
A useful policy states which uses are allowed, which data must never be entered, when AI use must be cited or labeled, who approves an automation, and how an error is recorded. A non-technical person should be able to read it in under five minutes.
Official sources
- European Commission questions and answers on AI literacy.
- Official text of Regulation (EU) 2024/1689, Article 4.
- AEPD privacy decalogue.
If you have saved the evidence for this lesson, continue with “Diagnosis and first AI pilot for an SME.” If not, repeat the check before moving on.
Learn with a verifiable reference
Aulafy distinguishes stable concepts from data that changes —versions, prices, models, and commands—. Check the course sheet for the review date, verified scope, and primary sources.
“Editorial review” means that structure, claims, and sources have been reviewed. It does not mean that every command has been executed: when a technical test exists, it will be indicated as such.