What you can and can't automate in a DPIA
A DPIA under Article 35 GDPR has an automatable core and a judgment core. AI can do the screening, the evidence assembly, and the citation grounding. A human DPO still has to sign the necessity and proportionality call. Here is where the line sits — and why the cited-evidence trail is the part worth automating.