Facilitates a Data Protection Impact Assessment (DPIA) by walking through necessity, proportionality, risks, and mitigations — use when someone says "do we need a DPIA", "run a DPIA for this feature", "GDPR Article 35 assessment", or "privacy risk assessment for this processing activity".