An employer that carries out non-covert surveillance of its employees at work makes sure no surveillance record from it is used or disclosed except: for a legitimate employment purpose or the employer's legitimate business activities or functions; by handing it to police or another law enforcement agency to detect, investigate or prosecute an offence; for purposes connected, directly or indirectly, with civil or criminal proceedings; or where it is reasonably believed needed to head off an imminent threat of serious violence or substantial property damage. Up to 20 penalty units.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.