Under GDPR art. 9(2)(g), health data may be processed by schools insofar as necessary for special support of pupils or special arrangements for their health; by probation institutions, special probation officers, the Child Protection Board, certified youth institutions or the legal persons of arts 1:256(1) and 1:302(2) Civil Code insofar as necessary for their statutory tasks; and by the Ministers concerned insofar as necessary for executing custodial measures.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.