Software can help businesses comply with data protection regulation. The development of such compliance software may be desirable because data protection compliance is difficult or burdensome to achieve, and especially for small and medium enterprises. Building software capable of providing proper legal guidance, or even enforcing the law, is, however, non-evident. This paper addresses some of the complexities and opportunities involved in the development of such software from a legal perspective. The paper focuses on the identification of relevant regulation, legal norm conflicts and the implementation of open norms in software.