The organization should make it possible for the customer to fulfill its requirements regarding data subjects.