Employers may use overt surveillance for safety, public health or security reasons, but employees do not always expect video or audio monitoring in their daily roles, so it should be used rarely. The employer must consult its workforce (staff, trade unions or both), above all as part of the DPIA; give adequate notice to employees of the nature, extent and purposes of the surveillance; make others caught by it, such as visitors and customers, aware of it and why; and respect staff rights, giving staff a direct route to take complaints or concerns to the employer.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.