KI-gestützte Risikobewertung gemäß Art. 33 f. DSGVO

When a personal data breach occurs, the controller must decide, under time pressure, whether it poses a (high) risk to the rights and freedoms of natural persons – although the GDPR prescribes no assessment procedure. This thesis provides a remedy: Oliver Wagner develops a legally grounded category model that operationalises the risk assessment under Art. 33, 34 GDPR objectively and transparently – with seven main categories and more than forty factors, from data sensitivity to safeguards. He also identifies the requirements for a legally compliant use of AI, thereby bridging legal doctrine and practical application. The author researches data protection and AI law.