is a dpia required under gdpr?
You must do a DPIA before you begin any type of processing that is “likely to result in a high risk”. ... In particular, the GDPR says you must do a DPIA if you plan to: use systematic and extensive profiling with significant effects; process special category or criminal offence data on a large scale; or.