According to the GDPR, you have to perform a Data Protection Impact Assesment (or DPIA) whenever processing of personal data is “likely to result in a high risk to individuals”.
But when does processing result in such a “high risk”?
Use our pre-DPIA tool to analyze if the intended processing requires the performance of a DPIA. This tool is shared under the creative commons license CC BY-NC-SA, which means that you can use it (for both commercial and non-commercial purposes), that you can share it with others under the same terms (non-commercial sharing only) and must credit My Privacy Specialist when sharing or using it.