Perform a Data Protection Impact Assessment for [ProjectName] processing [DataCategories] to achieve [ProcessingPurpose] in [Region]. Evaluate necessity and proportionality, identify risks to rights and freedoms, and recommend mitigations.
Output format:
Executive overview (≤150 words).
DPIA sections: Description, Lawful Basis, Data Flow (textual), Stakeholders, Risk Identification, Mitigations, Residual Risk, Consultation with DPO/Authorities.
Risk matrix (Markdown table) with Risk ID, Scenario, Likelihood (1–5), Impact (1–5), Inherent Score, Controls, Residual Score, Owner.
Decision recommendation (Approve/Approve with Conditions/Do Not Proceed) with rationale.
Assume privacy-by-design principles and data minimization.