No one may send a commercial electronic message with an Australian link, or have one sent, unless it is a designated commercial electronic message or the relevant electronic account-holder consented to its sending (consent as defined in Schedule 2: express, or reasonably inferred from conduct and existing business or other relationships). The prohibition also does not apply where the sender did not know and could not with reasonable diligence have found out that the message had an Australian link, or where the message was sent by mistake (a reasonable mistake of fact). Whoever relies on consent or either exception carries the evidential burden, so the sender must be able to point to evidence of consent for each address. Contravention is a civil penalty provision carrying the higher penalty tier (s 25) and the higher infringement notice amounts (Schedule 3).
This control maps to 4 controls across 4 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.