...Notification is a requirement for 'datacontrollers' under the Data Protection...by the IC in regulating large datacontrollers." The cost of fulfilling...indicated that less than 4% of datacontrollers will meet the criteria for tier...
http://www.out-law.com/default.aspx?page=10153