| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

Show document Help

Title:Zagotavljanje skladnosti z GDPR pri obdelavah podatkov z modeli umetne inteligence : diplomsko delo visokošolskega študijskega programa Informacijska varnost
Authors:ID Kores, Vasilij (Author)
ID Bernik, Igor (Mentor) More about this mentor... New window
Files:.pdf VS_Kores_Vasilij_2025.pdf (815,82 KB)
MD5: DB6D0A8A7D91E033A674D30F5767717A
 
Language:Slovenian
Work type:Bachelor thesis/paper
Typology:2.11 - Undergraduate Thesis
Organization:FVV - Faculty of Criminal Justice and Security
Abstract:Umetna inteligenca (UI) in sistemi strojnega učenja postajajo osrednji del sodobnih digitalnih storitev, pri čemer njihova sposobnost obdelave velikih količin podatkov odpira pomembna vprašanja glede varstva zasebnosti in skladnosti z zakonodajo, kot je Splošna uredba o varstvu podatkov (GDPR). Namen tega dela je analizirati ključne izzive zagotavljanja skladnosti UI sistemov z zahtevami GDPR ter oceniti mehanizme, strategije in pravne okvire, ki jih omogočajo ali zahtevajo obstoječi evropski in mednarodni regulativni dokumenti. UI, še posebej v svojih generativnih in napovednih oblikah, pogosto temelji na množičnem zbiranju in profiliranju podatkov, kar odpira dileme glede zakonitosti obdelave, privolitve ter načela najmanjšega obsega podatkov. EU je uvedla tveganjsko zasnovan pristop, ki v ospredje postavlja zanesljivost in preglednost UI sistemov, kljub temu pa obstajajo še neodgovorjena vprašanja o razmerjih med pravnimi akti, zlasti v primerih, ko avtomatizirane odločitve vplivajo na temeljne pravice posameznikov. Ena od osrednjih težav je zagotavljanje transparentnosti in razložljivosti odločitev UI sistemov ter zagotavljanje samodejne ocene skladnosti s politiko zasebnosti. V nalogi bomo preverili omejitve naravnih jezikovnih obdelav pri interpretaciji pravnih besedil. Velike jezikovne modele (LLM) in druge oblike generativne UI pogosto trenirajo na ogromnih in pogosto slabo dokumentiranih zbirkah podatkov, kar vodi do nejasnosti glede zakonitosti uporabljenih virov podatkov, vprašanj glede avtorskih pravic in morebitnih obdelav občutljivih podatkov brez pravne osnove. V primerjavi GDPR s kalifornijskim pravnim modelom CCPA in kitajskim zakonom o varstvu podatkov PIPL bomo ugotavljali možnosti za ustvarjanje čezmejnih regulatornih skladnosti UI sistemov, ter skladnosti z UNESCO priporočili o zagotavljanju etike sistemov UI in preprečevanju tveganj diskriminacije in marginalizacije posameznikov.
Keywords:diplomske naloge
Publication status:Published
Publication version:Version of Record
Place of publishing:Ljubljana
Place of performance:Ljubljana
Publisher:V. Kores
Year of publishing:2026
Year of performance:2026
Number of pages:X f., 68 str.
PID:20.500.12556/DKUM-96363 New window
UDC:342.72/,73:004.8(043.2)
COBISS.SI-ID:267495427 New window
Publication date in DKUM:05.02.2026
Views:142
Downloads:73
Metadata:XML DC-XML DC-RDF
Categories:FVV
:
Copy citation
  
Average score:(0 votes)
Your score:Voting is allowed only for logged in users.
Share:Bookmark and Share



Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Licences

License:CC BY-NC-ND 4.0, Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International
Link:http://creativecommons.org/licenses/by-nc-nd/4.0/
Description:The most restrictive Creative Commons license. This only allows people to download and share the work for no commercial gain and for no other purposes.
Licensing start date:22.12.2025

Secondary language

Language:English
Title:Ensuring gdpr compliance in data processing using artificial intelligence models
Abstract:Artifficial intelligence (AI) and machine learning systems are becoming a central part of modern digital services, with their capacity to process large volumes of data raising important questions concerning privacy protection and compliance with legislation such as the General Data Protection Regulation (GDPR). The purpose of this work is to analyze the key challenges in ensuring the compliance of AI systems with GDPR requirements and to evaluate the mechanisms, strategies, and legal frameworks enabled or mandated by existing European and international regulatory documents. AI, particularly in its generative and predictive forms, often relies on massive data collection and profiling, which raises dilemmas concerning the lawfulness of processing, the validity of consent, and the principle of data minimization. The EU has introduced a risk-based approach that emphasizes the reliability and transparency of AI systems; however, unresolved questions remain regarding the interplay between legal acts, especially in cases where automated decisions impact individuals’ fundamental rights. One of the core challenges is ensuring transparency and explainability of AI system decisions, as well as enabling automatic assessment of compliance with privacy policies. This thesis will examine the limitations of natural language processing (NLP) in interpreting legal texts. Large Language Models (LLMs) and other forms of generative AI are often trained on massive and poorly documented datasets, leading to uncertainties regarding the legality of data sources used, copyright issues, and the potential processing of sensitive data without a valid legal basis. By comparing the GDPR with the Californian legal model (CCPA) and China’s Personal Information Protection Law (PIPL), this work will explore the possibilities of establishing cross-border regulatory compliance for AI systems. It will also evaluate compliance with UNESCO recommendations on ensuring AI ethics and preventing risks of discrimination and marginalization of individuals.
Keywords:AI, GDPR, compliance, explainability, privacy


Comments

Leave comment

You must log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back
Logos of partners University of Maribor University of Ljubljana University of Primorska University of Nova Gorica