Law firms and in-house legal teams using AI agents must, under Article 4 of the EU AI Act, take measures so that lawyers, paralegals and others acting for them have sufficient AI literacy. In legal work, that means knowing what an agent read and drafted, where its authorities came from, and that the signing lawyer answers for every word.
What does Article 4 ask of a legal practice?
Article 4 applies to all providers and deployers of AI systems. In substance, they must take measures to ensure, to their best extent, a sufficient level of AI literacy among staff and other persons dealing with the operation and use of AI systems on their behalf. Sufficiency depends on those people's knowledge, experience, education and training, the context of use, and the people the systems are used on.
AI literacy means the skills, knowledge and understanding to use AI systems in an informed way and to understand their opportunities, risks and possible harms. For a legal practice, the people affected include clients, opposing parties and courts. Whether Article 4 requires formal training is covered in does the EU AI Act require AI literacy training.
Most legal agents are not high-risk. AI used by or for judicial authorities to research and interpret facts and law and apply it to facts is treated as high-risk, which matters for courts and those assisting them, but a firm's document review agent usually is not.
Who does it cover?
- Partners and senior lawyers who sign advice, filings and contracts that agents helped draft.
- Associates and trainees who instruct agents and check their output daily.
- Paralegals running document review, due diligence and bundle preparation with agents.
- Contract reviewers and outsourced review providers working on the firm's behalf in large matters.
- Legal operations and knowledge teams who connect agents to precedent banks and matter files.
- In-house counsel using agents on contracts and policies.
Paralegals carry much of the hands-on work with agents. A role-level example from another market is in AI agent training for paralegals in legal services in Australia, and the general mapping in who needs AI literacy under the EU AI Act.
What does literacy mean when a legal agent acts?
A governed legal agent might read a matter's documents at depth 1, draft clauses, summaries and letters at depth 2, and never send, file or sign anything itself. Filing with a court or sending advice to a client is held for a named lawyer.
The literacy lawyers and paralegals need is specific to legal work.
Authorities. The most serious legal failure is citing an authority that does not exist or does not say what the draft claims. Every authority the agent cites should be traceable to a source: a sealed record from the firm's own verified research database, or an external web page that must be checked. Lawyers must check every citation before relying on it, and know that a confident citation from an external source is the weakest kind.
Scope and confidentiality. An agent should only read the matter it is working on. Staff must understand that pasting another client's documents into a request breaches confidentiality, and that a refusal from the agent may mean it was asked to read outside its scope. They should route that refusal, not work around it.
Review discipline. Document review agents classify thousands of documents. Paralegals must sample the agent's classifications, especially privilege calls, rather than accept them wholesale. A privileged document disclosed by mistake is hard to recall.
Drafting judgement. An agent-drafted clause may be well formed and wrong for the deal. Associates must read it against the client's instructions and the rest of the document.
Lapses. An agent's certificate lapses after 90 days, and a run that clears no depth drops it to depth 1 the same day. During a large review, that can stop automated classification mid-matter; the team must be able to carry on.
How does a legal practice meet Article 4?
| Requirement | Control | Evidence it leaves |
|---|---|---|
| Sufficient literacy for staff | Core module plus role modules for lawyers, paralegals and legal operations | Records by role and date |
| Persons acting on the firm's behalf | Contract reviewers and review providers trained before agent access | Engagement terms; provider evidence |
| Awareness of risks and harms | Training on citation checking, privilege and confidentiality | Assessment results; sampled review quality |
| Fitted to context | Training uses the firm's own matter types and agents | Course map by practice area |
| Kept current | Briefings at agent recertification or source changes | Briefing records linked to agent changes |
What will a regulator or client ask?
Professional regulators, data protection authorities, market surveillance authorities and, increasingly, clients in their panel reviews may ask: how do lawyers and paralegals learn to check agent output? How are outsourced reviewers trained? How do you ensure agents only read the matter they work on? How are citations verified before filing? Who signs, and what did they check?
What does Article 4 not cover?
It does not set professional conduct rules, which apply in full. It does not replace duties of confidentiality and privilege. It does not prescribe course content or credentials. It does not make most legal agents high-risk. Comparisons are in Article 4 in banking and in logistics, and the general model in AI literacy and certification for people who work with agents.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
Where the Academy fits
Pryme Intelligence Academy sets its module tests in the learner's own industry and role, so a paralegal is tested on review and drafting tasks rather than generic examples, and every lab runs in a free Build workspace. For firms, an admin view shows progress, results, certificates and expiry dates across the team.
Questions people ask
Do partners need AI literacy training if they never use the agent?
If they sign work that agents helped produce, they need enough literacy to know what to ask and what to check. That is less than a paralegal needs, but not nothing.
Are contract reviewers on a big matter covered?
If they use the firm's AI systems on its behalf, the firm must take measures for their literacy. Engagement terms with review providers are the natural place to set it.
Can an agent file documents with a court?
Filing should be held for a named lawyer. The lawyer, not the agent, is answerable to the court for what is filed.