On a worker's written request, the employer lets the worker access surveillance records relating to them. If it does not, it may not rely on those records in legal proceedings with the worker or as the basis for adverse action against them. Access may be withheld where disclosure would breach s 22 or otherwise be unlawful, or where the employer has reasonable grounds to be satisfied that access would unreasonably intrude on others' privacy, the request is frivolous or vexatious, the material would be available through discovery in current or expected proceedings between them, access would expose the employer's negotiating position to its prejudice, a law requires or authorises withholding, or access would harm an inquiry into possible unlawful conduct or law enforcement work, or where a law enforcement body with a security function asks that access be withheld for national security.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.