R119. Hide recipients
This document details the security guidelines and requirements related to the administration of emails in companies and organizations. This requirement establishes the importance of hiding the recipients when sending bulk emails in order to avoid business information disclosure.
The BCC field must be used instead of the TO field when sending bulk emails.