Last reviewed 5 November 2026 against the sources linked in this post.
AI training for employees now has to cover tools people already use. Eurostat reports that 19.95% of EU enterprises with 10 or more employees used AI technologies in 2025, so the question for L&D is how staff use it, and whether anyone has told them what is allowed.
This is a list of 12 ready-made courses for L&D and compliance leads rolling out AI literacy and acceptable-use training. They cover AI literacy, safe everyday use, data sharing, AI security and the core habits that sit underneath them. Each entry says what the course covers, why an employee needs it and what the room does in the session. Each group ends with an Our pick. After the list comes a rollout order and a way to run the courses on AhaSlides.
All 12 courses at a glance
| Course | What it covers | Length | Legal duty on the organisation? |
|---|---|---|---|
| EU: AI literacy (EU AI Act Article 4) | The Article 4 basics | 35 min | Yes, in the EU (Article 4) |
| Working smarter with generative AI | A safe, repeatable workflow for office tasks | 40 min | No duty cited here |
| Copilot at work | Using an office-suite AI assistant within policy | 40 min | No duty cited here |
| AI in meetings | Note-takers, transcripts and summaries used fairly | 30 min | No duty cited here |
| AI security for everyone | Shadow AI, prompt injection and manipulated outputs | 30 min | No duty cited here |
| Your data and AI tools | What you can and cannot paste into AI tools | 30 min | No duty cited here |
| Secure use of generative AI | Data leaks, shadow AI and AI-enabled attacks | 35 min | No duty cited here |
| Deepfakes and AI-enabled fraud | Synthetic voice, video and image scams | 35 min | No duty cited here |
| Security awareness essentials | Baseline security habits | 35 min | No duty cited here |
| Phishing & social engineering | Spotting and reporting phishing | 30 min | No duty cited here |
| Passwords, passkeys and multi-factor authentication | Strong sign-in for AI-connected accounts | 30 min | No duty cited here |
| Social engineering, fraud and deepfakes | Phone, payment and impersonation scams | 35 min | No duty cited here |
AI literacy and everyday use
EU: AI literacy (EU AI Act Article 4)
This course covers the Article 4 basics. The AI Act Service Desk publishes the text: providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and others who operate or use AI systems on their behalf. In the session, run a Pick Answer quiz on which everyday tools in your company count as AI systems, then check the answers against your own tool list.
Working smarter with generative AI
This course teaches a safe, repeatable workflow for using generative AI on office tasks: decide what to share, ask clearly, check the answer, then own the result. In the session, give the room a draft email written by an AI tool with two invented facts in it and ask them, in an Open Ended slide, to find the errors. It shows why checking is part of the work and not an extra step.
Copilot at work
This course covers practical use of an office-suite AI assistant within your permissions and policy. It matters because an assistant works within the access the employee has, so check what that access covers. In the session, ask on a Rating Scale how confident people are about what the assistant can see, and look at the lowest scores together.
AI in meetings
AI note-takers raise consent and fairness questions that every meeting host has to handle: who agreed to be recorded, and who sees the summary? This course covers note-takers, transcripts and summaries used fairly and lawfully. In the session, run a Pick Answer scenario about a one-to-one that was recorded by default and ask what the host should have done first.
Our pick: Working smarter with generative AI. Drafting is a common use of a chatbot at work, and the error-spotting exercise builds the checking habit that every other AI course relies on.
AI security and data sharing
AI security for everyone
This course teaches how shadow AI, prompt injection and manipulated outputs create risk. Shadow AI means tools staff use without approval; prompt injection means hidden instructions in a document or page that steer an AI tool. In the session, show a document with a hidden instruction and run a poll on whether the room would have spotted it.
Your data and AI tools
This course gives a clear rule set for what data you can and cannot paste into AI tools. In the session, show four examples, such as a public press release, a customer list, meeting notes and a draft contract, and run a Pick Answer poll: paste, mask or never? Compare the votes with your policy and rewrite whichever line is unclear.
Secure use of generative AI
Data leaks and AI-enabled attacks are the main risks for everyday users. This course covers data leaks, shadow AI and attacks that use AI against employees. In the session, ask an Open Ended question: "Which AI tools do you use for work that we have not approved?" Anonymous answers give you a real list to review.
Deepfakes and AI-enabled fraud
This course teaches people to spot synthetic voice, video and image scams, and to stop and report them. In the session, play a short voice message asking for an urgent transfer and ask the room, by Pick Answer, whether they would act on it. Then walk through the checks that would have caught it.
Our pick: Your data and AI tools. It gives every employee a simple test before they paste anything, and the paste-mask-never poll settles most policy arguments in one session.
Core security habits
Security awareness essentials
These are the baseline security habits that apply before any AI tool is used. The course covers the everyday behaviours every employee should have. In the session, run a short quiz on a realistic day, with a lost badge, a shared password and an unlocked laptop, and ask what each person would do.
Phishing & social engineering
AI makes phishing emails more convincing, so users need to stay alert. This course teaches how to spot and report phishing and social engineering. In the session, show three messages and poll the room on which is fake, then discuss the clues.
Passwords, passkeys and multi-factor authentication
Strong authentication protects the accounts connected to AI tools, which often hold work documents and chat history. The course covers passwords, passkeys and multi-factor authentication for staff. In the session, ask on a Rating Scale how many of their AI accounts use multi-factor sign-in, and share the average.
Social engineering, fraud and deepfakes
Impersonation and payment scams can now use AI-generated voices, so a familiar voice is no longer proof of identity. This course covers phone, payment and impersonation scams and the habit of verifying on a second channel. In the session, poll the room on a scenario where a "manager" asks for a gift-card purchase by voice note.
Our pick: Social engineering, fraud and deepfakes. A cloned voice is the most vivid example of why AI changes the risk, and the verify-on-a-second-channel habit costs nothing to teach.
How to roll the plan out
Start with what carries a legal duty and what your onboarding already requires. For organisations in the EU, that is the AI literacy course, because Article 4 of the AI Act sets the duty. The European Commission's AI literacy Q&A says there is no need for a certificate and that organisations can keep an internal record of trainings and other initiatives, so keep a simple completion list. Then schedule the safe-use and data-sharing courses for everyone, and finish with the role-specific depth, such as Copilot for office-suite users.
Add the regional rules where your staff work. Eurostat's figure that 19.95% of EU enterprises with 10 or more employees used AI in 2025 is a reason to run the AI courses early rather than wait for a year-end cycle.
If you are building the governance side, the post on AI governance training covers deployer duties. For a 30-minute session plan, see AI literacy training, and for analysts who work with datasets, the guide to data protection training for analysts.
Ways to run these courses on AhaSlides
You can offer all 12 in three formats:
- Self-paced courses. Use the AhaSlides course creator to assign each employee a course to complete.
- A live Q&A deck. Collect questions about real AI tools ahead of the session, then answer them in the room.
- Pre and post surveys. Measure what changed in the same session.
Four slide types do most of the work:
- Pick Answer. Ask: "Can you paste this customer list into a chatbot? Paste, mask or never?" Show the split before you reveal the answer.
- Word Cloud. Ask: "What do you use AI for at work?" The biggest words show where policy is needed first.
- Rating Scale. Ask, before and after: "How confident are you about what you may share with an AI tool?" Rate from 1 to 5 and compare the averages.
- Open Ended. Ask: "What has an AI tool got wrong for you this month?" Answers can be anonymous, so people say what they think.
FAQ
What AI training do employees need?
Employees need safe-use rules, data-sharing limits, accuracy checking and a way to spot AI-enabled scams. The 12 courses above cover those four areas, plus the AI literacy basics.
Is AI training mandatory?
Yes, for AI literacy in the EU: Article 4 of the AI Act requires providers and deployers of AI systems to take measures to support the AI literacy of their staff. The amended text says this does not require guaranteeing any specific level of literacy for any individual. The Act also covers providers and deployers outside the EU where the output produced by the AI system is used in the Union. Outside the EU, check your own country's rules.
What should you never put into an AI tool?
Personal data, confidential information and anything your policy does not allow in an approved tool. When in doubt, ask before you paste.
How long should AI training take?
There is no set length. A short module of 30 to 60 minutes, repeated each year, is our suggestion for most staff, and the courses above run 30 to 40 minutes. None of the regulators cited here sets a duration.
This post is general information, not legal advice. For a decision about your own workplace, speak to a qualified lawyer or the regulator.
