I am testing a product survey website. As a response to getSurveyResults() call, the following details of all survey participants shall be displayed to all website users.
- Nick name
However, in results json, I could see the following additional fields for each survey participant.
- Order ID (product purchase ID)
- Survey questions and answers such as married or not, number of pets etc
- Incentive received to write review
Though these are not PII, does this come under data leakage issue?