Replying to @peterhense and @CMAgovUK, @ICOnews
Yes, the definition of "controller" is even specific about that. It's certainly true that they could be thinking about national laws. Also, it might already be the case in the UK Data Protection Act.
♥ 2