After performing the DPIA, the developers establish that the technical and security measures are appropriate to protect the rights and freedoms of data subject and can be considered appropriate safeguards as per article 89 GDPR.