For cameras filming places not open to the public no CNIL formality is needed, but the system is entered in the record of processing and any designated DPO is involved (including in a DPIA). Cameras filming places open to the public (public entrances, sales areas, counters, tills) need authorisation from the prefect (the police prefect in Paris), and a DPIA is required where the system amounts to systematic large-scale monitoring of a publicly accessible area.
This control maps to 3 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.