Before surveillance of an employee begins, the employer gives the employee written notice (email counts as writing). The notice goes out no later than 14 days ahead of the start, unless the employee agrees to a shorter period; where surveillance is already running when someone is hired, or will start within 14 days of their first day, the notice is given before that person starts work. The notice states: the kind of surveillance (camera, computer or tracking); how it will be carried out; when it will start; whether it will be continuous or intermittent; and whether it will run for a specified limited period or be ongoing. No notice is needed for camera surveillance at a workplace that is not one of the employee's usual workplaces. Surveillance without a compliant notice is covert surveillance (s 19).
This control maps to 3 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.