No one knowingly installs, uses or maintains an optical surveillance device to watch or visually record a private activity they are not part of unless every party to it has given express or implied consent. Exceptions: warrants and emergency authorisations, Commonwealth law, law enforcement officers on premises with the occupier's authority where reasonably necessary to protect someone's lawful interests, and incidental recording by the overt use of body-worn cameras or tablets by police, ambulance officers and prescribed persons. Maximum for an individual: 2 years' imprisonment or a 240 penalty unit fine (both level 7), or both; for a body corporate 1200 penalty units. Officers who fail to exercise due diligence are also liable (s 32A). Because a private activity excludes activity outside a building or where the parties ought to expect being observed, openly signed workplace CCTV in ordinary work areas is generally outside s 7, while cameras watching activity in places where workers reasonably expect privacy need consent (and Part 2A bans some places outright).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.