The EUs General Data Protection Regulation (GDPR) legislation isnt meant to be a mere compliance checklist. Data Protection Impact Assessments (DPIAs) help organisations identify and minimize data protection risks of a project. The idea is to prevent potential data protection issues before they arise and reduce the risk of compliance. DPIAs are important for accountability and provide a record showing that organizations are considering the impact data processing will have on EU citizen data. Failure to carry out a DPIA when required may leave you open to enforcement action.”]
Source: https://www.csoonline.com/article/3445424/when-and-how-to-write-a-gdpr-dpia.html