(95) Where necessary and upon request, the controller should assist the controller in ensuring compliance with the obligations arising from the data protection impact assessment and prior consultation of the supervisory authority.
„Our programmers know how to create software in compliance with GDPR.”
Are you sure about that?

