The controller shall seek the advice of the data protection officer, where designated, when carrying out a data protection impact assessment.