I would like to know how to carry out an assessment of necessity and proportionality when implementing the privacy by design requirement?

ANSWER

When it comes to assessing necessity and proportionality, this can be done in exactly the same way as in a DPIA (data protection impact assessment). Below is a link to our tool, where this part of the process is very well described: /narzedzia/formularz-dpia