Hope and May have published a short blog that outlines the "high risk" data processing, which might require you to complete a Data Protection Impact Assessment.
UK GDPR guidelines state that you must complete a DPIA under certain circumstances for example if you are processing special category or criminal offence data on a large scale. Find out more here.