HUMAN VERIFICATION REQUIRED ASVS 14.2.6 Sensitive-data minimization

The application only returns the minimum required sensitive data for the application's functionality. For example, only returning some of the digits of a credit card number and not the full number. If the complete data is required, it should be masked in the user interface unless the user specifically views it.