Cloud HR and office applications usually transfer employee data internationally. Transfers must meet the transfer rules; the Working Party prefers adequate protection to derogations, requires any consent relied on to be specific, unambiguous and freely given, and asks that data shared outside the EU and EEA, and onward access within the group, be kept to the minimum needed for the purpose (restated in section 6.5).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.