The authors explain why they joined together in order to conduct a data protection impact assessment (DPIA) for the German Corona app, which they published in April 2020, and outline the main questions that need to be addressed in a DPIA as well as the main outcomes of the assessment they conducted.