Where call records are produced (detailed billing), the last four digits of numbers are masked; managers access full numbers only exceptionally (manifestly abnormal use), and an employee can access the full numbers of their own calls, notably when asked to repay presumed personal calls. Telephony usage data are kept no more than one year. Using telephony data to control calls of staff and union representatives in their mandate is prohibited; since Cour de cassation, 6 April 2004, they must have equipment excluding interception and identification of their correspondents.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.