An employer should not treat a candidate's publicly visible profile as free to use: it needs a legal ground such as legitimate interest, should first consider whether the profile is professional or private, may collect only data necessary and relevant to the job applied for, and must tell the candidate about the checks before they engage with the process (for example in the job advert). There is no legal ground to require candidates to connect with the employer or otherwise open their profiles.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.