when is a dpia required gdpr?
In particular, the GDPR says you must do a DPIA if you plan to: use systematic and extensive profiling with significant effects; process special category or criminal offence data on a large scale; or. systematically monitor publicly accessible places on a large scale.