A data protection impact assessment (DPIA) should be completed at the outset ... it includes a set of screening questions which will determine whether a full DPIA is needed, and a form to use to ...