Metric 0 Pre-Check
Before implementing the AI Literacy Curriculum, confirm two gates:
- Gate 1 — Staff Role Inventory Available: A current staff role inventory exists with headcount and role classification for each role group in scope. If missing, obtain current data from HR before proceeding.
- Gate 2 — LMS Access Confirmed: A delivery mechanism exists for structured training (LMS, video platform, or structured in-person programme). If no LMS is available, document the alternative delivery method before launch.
---
1. Purpose
TAL-06 defines the organisation’s AI literacy programme: the structured set of learning experiences, competency expectations, and verification processes that ensure every person dealing with AI systems on the organisation’s behalf has sufficient understanding to use those systems safely, responsibly, and in compliance with professional and regulatory obligations.
It operationalises EU AI Act Article 4, which requires deployers to take measures to ensure, to their best extent, a sufficient level of AI literacy among staff and other persons dealing with AI systems on their behalf.
---
2. Strategic Context
Legal organisations face a structural AI literacy deficit. Most practitioners received no formal AI training, yet now rely on AI tools for research, drafting, review, and workflow automation. These tools require judgements about when to trust, verify, escalate, or refuse AI outputs.
This gap creates compounding risk: unchecked hallucinations, undisclosed AI use, misinterpreted monitoring data, and unmanaged Shadow AI. TAL-06 is the structured response, translating Article 4 into a concrete curriculum, competency expectations, and evidence regime tailored to legal practice.
---
3. Operating Principles
- Role-Proportionate Literacy: Requirements scale with exposure to AI systems and governance responsibility.
- Competency, Not Completion: Demonstrated capability is required; hours alone are insufficient.
- Annual Refresh Minimum: Literacy must keep pace with AI and regulatory change.
- Onboarding Is the First Gate: No AI BoM tool access before tier-appropriate completion.
- Evidence Is the Proof: Completion, scores, and gap analyses are primary Article 4 evidence and must be retained for 5 years (or longer for Expert records).
- Curriculum Reflects Real Tools: Training must reference the organisation’s actual AI tools, use cases, and governance artefacts.
---
4. Four Literacy Tiers
Tier 1 — AI Aware (All Staff)
Audience: every employee.
Duration: ~2 hours onboarding; 1-hour annual refresh.
Outcomes: recognise AI use in context; know governance contact; understand Shadow AI reporting; understand that AI outputs require human judgement.
Tier 2 — AI Practitioner (All AI Tool Users)
Audience: all users of AI BoM-registered tools.
Duration: 4–6 hours onboarding; 2-hour annual refresh.
Outcomes: state approved use cases and prohibitions; recognise hallucinations and bias indicators; know escalation pathways; apply human-in-the-loop requirements.
Tier 3 — AI Specialist (Governance, IT Security, Legal Ops Leads)
Audience: AI Governance team, IT Security, Legal Ops leads.
Duration: 12–16 hours onboarding; 4-hour annual refresh.
Outcomes: run GOV-09 evaluations; complete DAT-06 registrations; interpret monitoring and bias reports; run Shadow AI discovery sweeps; classify Shadow AI severity.
Tier 4 — AI Expert (AI Governance Lead, General Counsel, CISO)
Audience: senior decision-makers and governance authorities.
Duration: 20–24 hours onboarding; 4–6 hour annual refresh.
Outcomes: chair Agentic Governance Panels; apply Risk Taxonomy 2026 across all 9 classes; assess Class 6 incidents; engage regulators and clients; identify Article 4 gaps and direct remediation.
---
5. Role-Based Curriculum Tracks
Track 1 — General Counsel and Senior Partners (Tier 4)
Required modules: all 12.
Emphasis: regulatory landscape, ethics and liability, agentic AI governance, incident response.
Verification: written assessment + GOV-08 Panel simulation.
Track 2 — Legal Associates and Paralegals (Tier 2)
Required modules: 1–6, 9.
Emphasis: AI fundamentals, GOV-02 approved use, hallucination and verification, Shadow AI reporting.
Verification: module-level multiple-choice assessments.
Track 3 — Legal Operations (Tier 3)
Required modules: 1–10.
Emphasis: AI BoM registration, tool evaluation, Shadow AI discovery, monitoring and reporting.
Verification: written assessment + sample DAT-06 entry exercise.
Track 4 — AI Governance Lead (Tier 4)
Required modules: all 12, no optional content.
Verification: written assessment, GOV-08 Panel simulation, peer review of a GOV-09 evaluation.
Track 5 — IT Security (Tier 3)
Required modules: 1, 2, 5–8, 11.
Emphasis: agentic AI risk, technical controls and kill-switches, Shadow AI discovery, incident response.
Verification: written assessment + kill-switch scenario exercise.
Track 6 — Risk and Compliance (Tier 3)
Required modules: 1–6, 9–12.
Emphasis: risk taxonomy, regulatory landscape, ethics, DPS evidence standards.
Verification: written assessment.
---