DPIAs should be conducted at the beginning of any new project that involves the processing of cancer-related personal data. This includes new research studies, the implementation of new technologies, or when there are significant changes to existing data processing activities. Early assessment helps identify potential risks and implement necessary safeguards from the outset.