Handing footage to law enforcement is a separate operation needing its own justification. Where national law requires the controller to cooperate (a police request in an investigation), the basis is the legal obligation read with that law and the purpose-change test is usually not an issue; where the controller volunteers footage it believes shows something suspicious, it must check that legitimate interest applies, usually satisfied by a reasonable suspicion that a crime was committed. The authorities' own processing falls under the Law Enforcement Directive.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.