A PIA should be conducted when: - Launching New Projects: Introducing new products, services, or technologies that involve personal data. - Making Significant Changes: Modifying existing processes, systems, or services that affect how personal data is handled. - Responding to Legal Requirements: When new regulations or updates to existing laws are introduced. - Integrating Third-Party Services: When partnering with third parties that will have access to personal data.