No one knowingly installs, uses or maintains a tracking device to find where a person is without that person's express or implied consent, or where an object is unless whoever lawfully possesses or controls it has given express or implied consent. Exceptions: warrants and emergency authorisations, Commonwealth law, and orders under the Serious Offenders Act 2018, parole orders, community correction orders, prison governor orders and bail electronic monitoring conditions. Maximum for an individual: 2 years' imprisonment or a 240 penalty unit fine (both level 7), or both; for a body corporate 1200 penalty units. Officers who fail to exercise due diligence are also liable (s 32A). Employer GPS on vehicles or devices it lawfully possesses or controls rests on that possession or control; tracking a worker as a person, or through their own phone or vehicle, needs the worker's consent.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.