{"finding_id":"f-014","title":"GDPR / KVKK over-disclosure — customer records via /customer-lookup","mapping":{"gdpr":["Art.5(1)(c)","Art.32"],"kvkk":["Md.4","Md.12"],"soc2":["CC6.7"]}}