Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
Part 2: GDPR Implementation and Supplementary Provisions

Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) AT-DSG-6: Sections 12-13 - Image processing (video surveillance/CCTV)

Image processing (video surveillance) is permitted only on the conditions in DSG ss12-13, including admissibility grounds, transparency/marking and deletion obligations.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 96 controls across 61 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 4 controls

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

FedRAMP High · 2 controls

  • CA-8 Penetration Testing
  • IR-4 Incident Handling

FedRAMP Moderate · 2 controls

  • CA-8 Penetration Testing
  • IR-4 Incident Handling

FedRAMP Rev 5 · 2 controls

  • FedRAMP-Boundary Authorization Boundary, SSP, SAR, POA&M documentation
  • FedRAMP-ConMon Continuous Monitoring (ConMon) and Significant Change Requests

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 2 controls

ISO/IEC 27011:2024 · 2 controls

  • 27011-7.1 Physical security perimeters
  • 27011-7.3 Equipment protection

ISO/IEC 27400:2022 · 2 controls

  • 27400-5.2 IoT Risk Assessment
  • 27400-6.5 Security monitoring and incident response

NIST Cybersecurity Framework 2.0 · 2 controls

  • NIST-CSF-PR.AA-06 Physical access to assets is managed, monitored, and enforced commensurate with risk
  • NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 2 controls

  • NISTSP82-4 OT Access Control, Identity, Authentication, and Remote Access
  • NISTSP82-6 OT Audit, Monitoring, Anomaly Detection, and OT-Specific SOC

UK Security and Emergency Measures Direction (SEMD) - Water Industry · 2 controls

  • SEMD-PS-1 Critical Infrastructure Protection
  • SEMD-PS-2 Site Security Measures

21 CFR Part 58 - Good Laboratory Practice (GLP) · 1 control

  • 58.43 Animal Care Facilities

API 1164 · 1 control

  • API1164-13 Business Continuity and Recovery

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

  • AWWA-2.4 Physical Access Controls

BSI IT-Grundschutz · 1 control

  • BSI-17 Continuous monitoring strategy

Belgium CyberFundamentals · 1 control

FBI CJIS Security Policy · 1 control

  • CJIS-14 Physical Protection

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

  • CAT-D3-2 Detective controls

FISMA · 1 control

  • FISMA-3554-Agency-Responsibilities Federal Agency Responsibilities (44 USC 3554) - CIO + CISO + Program + Reporting

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

  • FTC-Safeguards-ServiceProvider-Evaluation Service Provider Oversight + Program Evaluation + Personnel Training (16 CFR 314.4(d-g))

Florida Digital Bill of Rights (FDBR) · 1 control

  • FDBR-Enforcement-AG-CurePeriod Enforcement by Florida Department of Legal Affairs + Penalties + 45-Day Cure (Fla. Stat. 501.72, 501.721, 501.722)

Ghana Cybersecurity Act · 1 control

  • GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics

HKMA Cyber Resilience Assessment Framework (C-RAF) · 1 control

  • HKMA-CRAF-Domain3-4-Protection-Detection HKMA C-RAF Domain 3 (Protection) + Domain 4 (Detection) - Access, Data, Infrastructure, Application, Monitoring, Testing, Threat Intel

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 1 control

  • IACS-UR-E26-Protect-RemoteAccess-Wireless-Physical-Boundary IACS UR E26 Protect Goal - Remote Access + Wireless + Physical Security + Boundary Protection

IAIS Insurance Core Principles (ICPs) · 1 control

  • ICP-24 Macroprudential Surveillance and Insurance Supervision

IEC 62443 · 1 control

  • IEC62443-13 Network security monitoring

IEEE 1686 · 1 control

  • IEEE1686-Section5.2-5.3-AuditLog-Retention-Export-Monitoring IEEE 1686 Section 5.2 + 5.3 - Audit Trail Records + Retention + Export + Supervisory Monitoring and Control + Network Security Monitoring

IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4) · 1 control

  • IMO-MSC-FAL-Detect-AnomalyDetection-OT-IT-Monitoring-Reporting-BridgeAlarms IMO MSC-FAL Detect Function - Anomaly Detection + OT and IT System Monitoring + Bridge Alarms + Log Aggregation + Incident Reporting Channels + Crew Observation

ISMAP (Japan) · 1 control

ISO 28001:2007 Supply Chain Security Management · 1 control

  • ISO28001-PS-01 Facility Security

ISO/IEC 27006-1:2024 · 1 control

  • 27006-9.4 Surveillance and recertification

ISO/IEC 27010:2015 · 1 control

  • 27010-11.1 Physical Protection

ISO/IEC 27019:2024 · 1 control

  • ISO27019-13 Network security monitoring

Japan FSA Cybersecurity Guidelines for Financial Institutions · 1 control

  • JP-FSA-CYB-Security-Monitoring-SOC-Operations-SIEM-EDR-MDR-XDR-24x7-Detection-Alert-Triage Japan FSA Cybersecurity Security Monitoring + SOC 24x7 Operations + SIEM + EDR + MDR + XDR + Detection + Alert Triage + Threat Hunting + Incident Response Integration + Threat Intelligence Integration + UEBA

MTCS (Singapore) · 1 control

  • MTCS-Logging-Monitoring-Compliance-Audit-SLA-Configuration-SIEM-SOAR-Cloud-Monitoring-CSPM MTCS Logging + Monitoring + Compliance + Audit + SLA + Configuration + SIEM + SOAR + CSPM

NAIC Insurance Data Security Model Law (MDL-668) · 1 control

  • NAIC-2 Information Security Program (ISP) - Section 4

NERC CIP · 1 control

  • NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010)

NIST Privacy Framework · 1 control

  • NISTPF-5 Protect-P Access Control (PR.AC-P)

NIST SP 1800-32 · 1 control

NIST SP 800-144 · 1 control

  • NISTSP144-8 Monitoring, Incident Response, Exit Strategy, and Compliance

NIST SP 800-145 · 1 control

  • NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition

NIST SP 800-146 · 1 control

NIST SP 800-190 · 1 control

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

New Zealand Information Security Manual (NZISM) · 1 control

  • NZISM-5 Network Security, System Hardening, and Application Security

OWASP DevSecOps Maturity Model (DSOMM) · 1 control

  • DSOMM-5 Information Gathering, Logging, Monitoring, and Incident Response

Oman National Cybersecurity Framework · 1 control

  • OMANCS-6 Security Monitoring, Detection, Incident Response, and OmanCERT Notification

Protective Security Policy Framework (PSPF) Release 2026 · 1 control

  • PSPF24-4 Physical Security

SOC 2 · 1 control

  • SOC2-CC6.1 CC6.1 Logical access security over protected information assets

SOC for Cybersecurity - Cybersecurity Risk Management Examination · 1 control

  • SOC-CY-S1 Logical and Physical Access Controls

SSAE 18 - Attestation Standards (SOC Reporting) · 1 control

  • SSAE18-CC6.4 CC6.4 - Physical Access Restrictions

Security of Critical Infrastructure Act 2018 (SOCI) · 1 control

  • SOCI-CIRMP-PHYSICAL CIRMP hazard vector: Physical security and natural hazards

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

  • IM8-SEC.3 Network Security

South Korea ISMS-P · 1 control

  • ISMSP-SYS-03 Security Monitoring and Log Management

Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 1 control

  • GT-2 Physical Security Threats

TEFCA - Trusted Exchange Framework and Common Agreement · 1 control

  • TEFCAREC-1 Common Agreement Conformance and Onboarding

TISAX - Trusted Information Security Assessment Exchange · 1 control

TSA Pipeline Cybersecurity Directives · 1 control

  • TSAPIPE-2 OT/IT Network Segmentation and Access Control

UK Gambling Commission LCCP and Remote Technical Standards · 1 control

  • UKGAMBLE-4 Resilience and Incident Response

UK Telecommunications (Security) Act 2021 · 1 control

  • UK-TSA-MON-01 Security Monitoring

US SEC Digital Assets and Crypto Regulatory Framework · 1 control

  • US-SEC-DA-SC-03 ETF Framework

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Part 2: GDPR Implementation and Supplementary Provisions

Query this from an agent

The graph holds this control, the 96 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) controls