Before a camera is used, the purposes of the processing must be specified in detail and recorded in writing for each camera (cameras used by one controller for the same purpose may be documented together), and data subjects must be told of them. A bare label such as 'safety' does not specify a purpose and conflicts with lawful, fair and transparent processing. Any Article 6(1) ground can in principle apply (a legal obligation where national law requires surveillance), but legitimate interest and public task are the usual ones and consent is exceptional.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.