Employers should process workers' data only for purposes that are specified and legitimate, proportionate and necessary, and should apply purpose limitation so that the data collected stay adequate and relevant to that purpose and go no further. The Opinion restates this from Opinion 8/2001 and says new monitoring technology makes it more important, not less.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.