.
the same personal data displayed within a product: emails, phone numbers, credit cards, internal user IDs, last activity dates, etc. Any data displayed in the user interface must pass through the “can it do any harm?” filter. Example 2 We’ve been hearing about thousands of compromised user accounts