According to the GDPR, you have to perform a Data Protection Impact Assesment (or DPIA) whenever processing of personal data is “likely to result in a high risk to individuals”.

But when does processing result in such a “high risk”?