The data protection impact assessment (DPIA) evaluates the risks of a processing activity likely to result in a high risk for people, for example large-scale profiling or sensitive data. It describes the processing, assesses necessity and proportionality, analyzes the risks and sets the measures to reduce them.
Example
Algorithmic scoring of employees in principle requires a DPIA.