Personal data about criminal convictions, offences or related security measures, processed on an Article 6 basis, may be processed only under the control of official authority or where authorised by domestic law or relevant international law with appropriate safeguards; section 10(5) and Schedule 1 of the 2018 Act supply the domestic-law conditions and section 11(2) defines the data to include allegations, proceedings and sentencing. A comprehensive register of criminal convictions may be kept only under official authority.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.