A DPIA (Data Protection Impact Assessment) is mandatory if the data processing is likely to pose a high privacy risk to the persons whose data an organization wishes to process. Identify the privacy risks of data processing in advance, take measures afterwards to reduce the risks.
Answer the nine questions regarding the data and its processing objectively and truthfully. We will immediately give an indication* whether a DPIA is necessary. That's all. It couldn't be simpler (and cheaper).
Then contact a legal expert directly. They will gladly and competently support you with substantive and legal advice.
* Please note that the outcome of this questionnaire is not legal advice; that is not permitted by law nor is it appropriate within our ethical guidelines regarding the use of algorithms. For legal advice, please contact a lawyer directly.