Per Article 35(3), under which of the following circumstances is a Data Protection Impact Assessment required to be conducted?
a) Routine data processing
b) High-risk data processing operations
c) Low-impact data processing operations
d) Non-sensitive data processing