An AI risk analyst is preparing a risk register for a content recommendation system. The analyst identifies that the algorithm may create filter bubbles by repeatedly showing users content similar to what they have previously engaged with. How should this risk be categorized?

B is correct because filter bubbles represent a systemic societal risk — the algorithmic amplification of existing preferences limits exposure to diverse viewpoints, potentially contributing to polarization and societal harm at scale. A is a data security concern. C is an infrastructure risk. D is a business outcome, not a risk category aligned to AI risk frameworks.