A person in Australia (an individual present there, or a body corporate or partnership carrying on business or activities there), or supplying to such a customer, may not supply, or offer, address-harvesting software (software built or marketed to search the internet for electronic addresses and gather them), a right to use it, a harvested-address list (a list produced to any extent, directly or indirectly, by such software) or a right to use one. It is not a breach where nothing gave the supplier cause to suspect that anyone planned to use the software or list to send messages in breach of s 16, or if the supplier did not know and could not reasonably have found out that the customer was in Australia (evidential burden on the supplier). Civil penalty provision (lower tier).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.