Question

A healthcare company ingests patient support transcripts into a Delta table that feeds a RAG chatbot for internal staff. The transcripts contain patient names and medical record numbers (MRNs). Compliance requires that most staff never see raw MRNs, while a small clinical-audit group must retain full access. The Generative AI Engineer wants to enforce this at the data layer so the protection is applied consistently regardless of which pipeline or notebook reads the table. Which Unity Catalog capability best meets this requirement?

Accepted Answer

Apply a column mask function on the MRN column that returns a redacted value unless the querying user belongs to the clinical-audit group

Answer

Store the raw transcripts in a separate workspace and grant the clinical-audit group access to that workspace only

Answer

Add a system prompt to the chatbot instructing the LLM not to reveal MRNs to unauthorized users

Answer

Create a filtered copy of the table with MRNs removed and grant most staff SELECT only on that copy