...
If the data in the map is considered sensitive, this example will also violate SER03-J. Do not serialize Prevent serialization of unencrypted, sensitive data.
...
16. Serialization (SER) SER03-J. Do not serialize Prevent serialization of unencrypted, sensitive data